Advisories · Technology

ClassCMS.

Every CVE that names ClassCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-12666 CVE record

CVSS 5.1 Medium

ClassCMS User Management Page admin insufficient privileges
- ClassCMS
- Privilege escalation
- CWE-274
Not analysed yet 16 Dec 2024
CVE-2024-12503 CVE record

CVSS 5.1 Medium

ClassCMS Model Management Page admin cross site scripting
- ClassCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 12 Dec 2024
CVE-2024-8145 CVE record

CVSS 5.1 Medium

ClassCMS Article admin cross site scripting
- ClassCMS
- Cross-site scripting (XSS)
Not analysed yet 25 Aug 2024
CVE-2024-8144 CVE record

CVSS 5.3 Medium

ClassCMS Logo admin cross site scripting
- ClassCMS
- Cross-site scripting (XSS)
Not analysed yet 25 Aug 2024
CVE-2024-6932 CVE record

CVSS 5.3 Medium

ClassCMS cross site scripting
- ClassCMS
- Cross-site scripting (XSS)
Not analysed yet 20 Jul 2024