Search vulnerabilities

Results 2

Export CSV
CVE-2022-36579

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-21005

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products