Hyperkopite/PublicCMS_Vulns

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-65837 ↗	Dec 22, 2025Monday, 22 December 2025, 20:15	5.4 MEDIUM	—
PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search module.
CVE-2025-65840 ↗	Dec 1, 2025Monday, 1 December 2025, 21:15	8.8 HIGH	—
PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController.
CVE-2025-65836 ↗	Dec 1, 2025Monday, 1 December 2025, 20:15	9.1 CRITICAL	—
PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController.
CVE-2025-65838 ↗	Dec 1, 2025Monday, 1 December 2025, 20:15	7.5 HIGH	—
PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method.