Schlix

6 CVEs in 2 Schlix products, including Cms, Schlix Cms. Newest: CVE-2021-47964 (2026-05-15). Severity, EPSS and public exploits for each.

Schlix products with known CVEs

ProductCVEs
Cms4
Schlix Cms2
Schlix CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-47964High8.82026-05-15Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious exte…
CVE-2021-47834Medium6.42026-01-16Schlix CMS 2.2.6-6 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into category titles. A…
CVE-2025-67443Medium6.12025-12-22Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS). Due to lack of javascript sanitization in the login form, incorrect login attempts in l…
CVE-2023-31505High7.22024-01-31An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrary code and obtain sensitive information…
CVE-2022-45544High8.82023-02-07Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao par…
CVE-2019-11021High7.22019-10-24admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution. NOTE: "While inadvertently allowi…