Classcms

8 CVEs across 1 Classcms products. Browse Classcms vulnerabilities, severities, and proof-of-concept exploits.

Classcms products with known CVEs

ProductCVEs
Classcms8
Classcms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-57099Critical9.82025-02-03ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model ma…
CVE-2024-57097Medium4.82025-02-03ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.
CVE-2024-12666Medium4.72024-12-16A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?…
CVE-2024-12503Low2.42024-12-12A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of…
CVE-2024-48180Critical9.82024-10-16ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to…
CVE-2024-8145Low2.42024-08-25A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.p…
CVE-2024-8144Low3.52024-08-25A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of…
CVE-2022-25581High7.82022-03-18Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection v…