CVE-2025-15148 | Medium | 4.7 | 2025-12-28 | A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetemp_action in the library /lib/admin/template_admin.php of the component Backend Te… |
CVE-2025-11332 | Low | 3.5 | 2025-10-06 | A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing… |
CVE-2025-55910 | Medium | 6.3 | 2025-09-19 | CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php. |
CVE-2025-1336 | Medium | 4.3 | 2025-02-16 | A vulnerability has been found in CmsEasy 7.7.7.9 and classified as problematic. Affected by this vulnerability is the function deleteimg_action in the library… |
CVE-2025-1335 | Medium | 4.3 | 2025-02-16 | A vulnerability, which was classified as problematic, was found in CmsEasy 7.7.7.9. Affected is the function deleteimg_action in the library lib/admin/file_adm… |
CVE-2025-1106 | Medium | 5.4 | 2025-02-07 | A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/restore_action in the library lib/admin/da… |
CVE-2025-0973 | Medium | 5.4 | 2025-02-03 | A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_action in the library lib/admin/database_a… |
CVE-2024-34315 | High | 7.5 | 2024-05-07 | CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action method of /admin/templa… |
CVE-2024-34314 | Medium | 4.9 | 2024-05-07 | CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fetch_action method of /admin/template… |
CVE-2024-31551 | High | 7.5 | 2024-04-26 | Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request. |
CVE-2024-32236 | Low | 3.5 | 2024-04-25 | An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component. |
CVE-2024-32163 | Medium | 6.4 | 2024-04-17 | CMSeasy 7.7.7.9 is vulnerable to code execution. |
CVE-2024-32162 | Medium | 4.3 | 2024-04-17 | CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. |
CVE-2024-25828 | Medium | 4.9 | 2024-02-22 | cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php. |
CVE-2024-0523 | Medium | 6.3 | 2024-01-14 | A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is the function getslide_child_action in the… |
CVE-2020-18406 | High | 7.5 | 2023-06-27 | An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encryption of form data. |
CVE-2023-34880 | Critical | 9.8 | 2023-06-15 | cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php. This vulnerabilit… |
CVE-2021-42644 | Medium | 6.5 | 2022-05-17 | cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the configuration file information of the website such as the databas… |
CVE-2021-42643 | High | 8.8 | 2022-05-17 | cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script file is written to the website server, a… |
CVE-2019-8434 | Medium | 6.1 | 2019-02-18 | In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter. |
CVE-2019-8432 | Medium | 6.1 | 2019-02-18 | In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter. |
CVE-2018-11680 | Medium | 6.5 | 2018-06-02 | An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a… |
CVE-2018-11679 | High | 8.8 | 2018-06-02 | An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_di… |