Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-22849

Hyweb HyCMS-J1 - Stored XSS

Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS (Stored Cross-site scripting) attack.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Hyweb
Products
Hycms-j1
CVE-2021-22847

Hyweb HyCMS-J1 - SQL Injection

Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands without privilege.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Hyweb
Products
Hycms-j1