Vulnerabilities (CVE)

Filtered by vendor Chshcms Subscribe
Filtered by product Cscms
Total 21 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-16731 1 Chshcms 1 Cscms 2024-02-28 7.5 HIGH 9.8 CRITICAL
CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data.