Advisories · Technology

WuKongOpenSource WukongCRM.

Every CVE that names WuKongOpenSource WukongCRM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-2141 CVE record

CVSS 5.3 Medium

WuKongOpenSource WukongCRM URL PermissionServiceImpl.java improper authorization
- WuKongOpenSource WukongCRM
- Privilege escalation
- Broken access control
Not analysed yet 8 Feb 2026
CVE-2025-8852 CVE record

CVSS 5.3 Medium

WuKongOpenSource WukongCRM API Response upload information exposure
- WuKongOpenSource WukongCRM
- Information disclosure
Not analysed yet 11 Aug 2025
CVE-2025-6106 CVE record

CVSS 5.3 Medium

WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery
- WuKongOpenSource WukongCRM
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 16 Jun 2025
CVE-2025-5879 CVE record

CVSS 5.1 Medium

WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting
- WuKongOpenSource WukongCRM
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 9 Jun 2025
CVE-2025-5521 CVE record

CVSS 5.3 Medium

WuKongOpenSource WukongCRM updataPassword cross-site request forgery
- WuKongOpenSource WukongCRM
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 3 Jun 2025