PatchTheCVExunruicms vulnerabilities
Recent CVEs affecting xunruicms products. 12 tracked.
xunruicms has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-12-28. Highest priority: CVE-2025-1177 (score 41/100).
- CVE-2025-15144 MEDIUM 4.3 UPGRADE A weakness has been identified in dayrui XunRuiCMS up to 4.7.1
- CVE-2025-14006 LOW 3.5 UPGRADE A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1
- CVE-2025-14007 LOW 2.0 UPGRADE A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1
- CVE-2025-60445 MEDIUM 6.1 DOWNGRADE A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version 4.7.1
- CVE-2025-2131 LOW 2.4 UPGRADE A vulnerability was found in dayrui XunRuiCMS up to 4.6.3
- CVE-2025-25957 MEDIUM 6.1 UPGRADE Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate priv
- CVE-2025-1186 MEDIUM 6.3 UPGRADE A vulnerability was found in dayrui XunRuiCMS up to 4.6.4
- CVE-2025-1177 MEDIUM 6.3 DOWNGRADE A vulnerability was found in dayrui XunRuiCMS 4.6.3
- CVE-2025-14008 MEDIUM 4.7 UPGRADE A flaw has been found in dayrui XunRuiCMS up to 4.7.1
- CVE-2025-14005 LOW 2.4 UPGRADE A weakness has been identified in dayrui XunRuiCMS up to 4.7.1
- CVE-2025-14004 MEDIUM 4.7 UPGRADE A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1
- CVE-2024-31634 MEDIUM 6.1 UPGRADE Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to exe
FAQ
How do I fix xunruicms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xunruicms being exploited right now?
None of the tracked xunruicms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xunruicms CVE should I patch first?
CVE-2025-1177 currently ranks highest (41/100): A vulnerability was found in dayrui XunRuiCMS 4.6.3.