CVE-2024-55089

Rhymix 2.1.19 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function. The issue’s affected component is Rhymix (CMS/framework), with the root cause being insecure handling of server-side requests during the import process. Reported impact includes potential una...

CVE-2025-45242

Summary: CVE-2025-45242 affects Rhymix v2.1.22 with an arbitrary file deletion vulnerability in the procFileAdminEditImage workflow under /file/file.admin.controller.php. The issue originates from improper handling in that method, enabling deletion of arbitrary files. Documented impact is a high-...

CVE-2018-19601

CVE-2018-19601 : Rhymix CMS 1.9.8.1 is affected by an SSRF via an SVG upload in index.php?module=admin&act=dispModuleAdminFileBox. The entry documents an SSRF risk but provides no public details on affected files beyond the described vector. CVSS metrics indicate high/severe impact (CVSS3 base sc...

CVE-2018-19600

Rhymix CMS 1.9.8.1 is affected by a Cross‑Site Scripting (XSS) vulnerability in the index.php?module=admin&act=dispModuleAdminFileBox page, exploitable by uploading a specially crafted SVG file. The root cause is the handling of SVG uploads that allows injected scripts/HTML to execute in the cont...