PatchTheCVE: classcms

CVE-2024-57099: ClassCMS v4.8 has a code execution vulnerability

Wed, 17 Jun 2026 08:13:19 +0000

CRITICAL 9.8: ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server.

CVE-2024-57097: ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.

Wed, 17 Jun 2026 08:13:19 +0000

MEDIUM 4.8: ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.

CVE-2024-12666: A vulnerability has been found in ClassCMS up to 4.8 and classified as critical

Wed, 17 Jun 2026 07:00:14 +0000

MEDIUM 4.7: A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPost of the component User Management Page. The manipulation leads to improper handling of insufficient privileges. The att

CVE-2024-12503: A vulnerability classified as problematic was found in ClassCMS 4.8

Wed, 17 Jun 2026 06:59:50 +0000

LOW 2.4: A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Model Management Page. The manipulation of the argument URL leads to cross site scripting. The attack can be launched remotely

CVE-2024-48180: ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a

Wed, 17 Jun 2026 07:58:16 +0000

CRITICAL 9.8: ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.

CVE-2024-8145: A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8

Wed, 17 Jun 2026 08:21:59 +0000

LOW 2.4: A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be laun

CVE-2024-8144: A vulnerability classified as problematic was found in ClassCMS 4.8

Wed, 17 Jun 2026 08:21:59 +0000

LOW 3.5: A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Logo Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclo

CVE-2024-6932: A vulnerability was found in ClassCMS 4.5

Wed, 17 Jun 2026 08:19:00 +0000

LOW 3.5: A vulnerability was found in ClassCMS 4.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/?action=home&do=shop:index&keyword=&kind=all. The manipulation of the argument order leads to cross site scripting. The attack can be launched