Advisories · Technology

Exponent CMS.

Every CVE that names Exponent CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108900 CVE record

CVSS 6.9 Medium

Exponent CMS XML-RPC xmlrpc.php userLogin sql injection
- Exponent CMS
- Other injection
- SQL injection
Not analysed yet 12 Oct 2026
CVE-2022-23049 CVE record

Exponent CMS: Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript…
- Exponent CMS
Not analysed yet 9 Feb 2022
CVE-2022-23048 CVE record

Exponent CMS: Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious…
- Exponent CMS
Not analysed yet 9 Feb 2022
CVE-2022-23047 CVE record

Exponent CMS: Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent…
- Exponent CMS
Not analysed yet 9 Feb 2022