<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: sanluan-publiccms</title><description>Every new CVE for sanluan-publiccms.</description><link>https://agentprime.io/</link><item><title>CVE-2026-121583: Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization</title><link>https://agentprime.io/advisories/CVE-2026-121583/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-121583/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 23:15:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-120319: Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization</title><link>https://agentprime.io/advisories/CVE-2026-120319/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120319/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Nov 2026 01:15:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110113: PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-110113/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110113/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 16:53:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97721: Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization</title><link>https://agentprime.io/advisories/CVE-2026-97721/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97721/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 05:45:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8740: Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine</title><link>https://agentprime.io/advisories/CVE-2026-8740/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8740/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 17 May 2026 08:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8739: Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key</title><link>https://agentprime.io/advisories/CVE-2026-8739/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8739/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 17 May 2026 07:45:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8738: Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error</title><link>https://agentprime.io/advisories/CVE-2026-8738/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8738/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 17 May 2026 07:30:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8737: Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication</title><link>https://agentprime.io/advisories/CVE-2026-8737/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8737/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 17 May 2026 06:45:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6797: Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption</title><link>https://agentprime.io/advisories/CVE-2026-6797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6797/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Apr 2026 20:45:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6796: Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file</title><link>https://agentprime.io/advisories/CVE-2026-6796/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6796/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Apr 2026 20:30:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5987: Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine</title><link>https://agentprime.io/advisories/CVE-2026-5987/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5987/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Apr 2026 22:45:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3289: Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal</title><link>https://agentprime.io/advisories/CVE-2026-3289/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3289/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 04:32:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-2010: Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization</title><link>https://agentprime.io/advisories/CVE-2026-2010/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-2010/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Feb 2026 08:02:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1112: Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization</title><link>https://agentprime.io/advisories/CVE-2026-1112/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1112/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 18 Jan 2026 06:02:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1111: Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal</title><link>https://agentprime.io/advisories/CVE-2026-1111/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1111/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 18 Jan 2026 05:32:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-7953: Sanluan PublicCMS viewer.html redirect</title><link>https://agentprime.io/advisories/CVE-2025-7953/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-7953/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Jul 2025 03:32:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-7949: Sanluan PublicCMS preview.html redirect</title><link>https://agentprime.io/advisories/CVE-2025-7949/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-7949/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Jul 2025 01:32:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11070: Sanluan PublicCMS Tag Type save cross site scripting</title><link>https://agentprime.io/advisories/CVE-2024-11070/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11070/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Nov 2024 14:31:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-3950: sanluan PublicCMS Tab dwz.min.js initLink cross site scripting</title><link>https://agentprime.io/advisories/CVE-2022-3950/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3950/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Nov 2022 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>