CVE-2021-22847

The CVE-2021-22847 entry affects Hyweb HyCMS-J1. The root cause is failure to filter POST request parameters in the API, enabling remote SQL injection and command execution without privileges. The vulnerability is reported with an NVD score of 8.8 (CVSS-3.1, HIGH) and 6.5 (CVSS-2.0, MEDIUM) with ...

CVE-2021-22849

CVE-2021-22849 affects Hyweb HyCMS-J1; the backend editing function does not filter special characters, enabling stored XSS where logged-in users can inject JavaScript. Root cause: insufficient input sanitization on editing payloads. Documented impact includes stored XSS risk with potential parti...