PatchTheCVEcxuucms vulnerabilities and fixes
Recent CVEs affecting cxuucms, with upgrade or downgrade steps. 8 tracked.
cxuucms has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-03-29. Highest priority: CVE-2020-28091 (score 59/100).
- CVE-2021-42970 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parame
- CVE-2021-3264 HIGH 7.2 DOWNGRADE SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php.
- CVE-2021-39599 MEDIUM 6.1 DOWNGRADE Multiple Cross Site Scripting (XSS) vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in (1
- CVE-2020-35347 MEDIUM 6.5 DOWNGRADE CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add.
- CVE-2020-35346 MEDIUM 4.8 DOWNGRADE CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary w
- CVE-2020-29250 MEDIUM 6.1 DOWNGRADE CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php.
- CVE-2020-29249 MEDIUM 6.1 DOWNGRADE CXUUCMS V3 allows class="layui-input" XSS.
- CVE-2020-28091 HIGH 7.5 DOWNGRADE cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywo
FAQ
How do I fix cxuucms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cxuucms being exploited right now?
None of the tracked cxuucms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cxuucms CVE should I patch first?
CVE-2020-28091 currently ranks highest (59/100): cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywo.