Youdiancms

12 CVEs across 1 Youdiancms products. Browse Youdiancms vulnerabilities, severities, and proof-of-concept exploits.

Youdiancms products with known CVEs

ProductCVEs
Youdiancms12
Youdiancms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-3533Medium4.32025-04-13A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admi…
CVE-2025-3532Medium4.32025-04-13A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/ind…
CVE-2025-3531Medium4.32025-04-13A vulnerability classified as problematic has been found in YouDianCMS 9.5.21. This affects an unknown part of the file /App/Tpl/Admin/Default/Log/index.html…
CVE-2024-57052Critical9.82025-01-27An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file.
CVE-2024-7330Medium6.32024-08-01A vulnerability has been found in YouDianCMS 7 and classified as critical. Affected by this vulnerability is the function curl_exec of the file /App/Core/Exten…
CVE-2024-7329Medium6.32024-07-31A vulnerability, which was classified as critical, was found in YouDianCMS 7. Affected is an unknown function of the file /Public/ckeditor/plugins/multiimage/d…
CVE-2024-7328Medium5.32024-07-31A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpi…
CVE-2024-3117Medium4.72024-03-31A vulnerability classified as critical was found in YouDianCMS up to 9.5.12. This vulnerability affects unknown code of the file App\Lib\Action\Admin\ChannelAc…
CVE-2022-32301Critical9.82022-06-15YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php.
CVE-2022-32300High8.82022-06-15YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php.
CVE-2022-32299High8.82022-06-15YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php.
CVE-2020-18116High8.82021-08-27A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.