xunruicms vulnerabilities
CVEs whose affected-version data names the xunruicms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-14007Low· 2.0A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1
A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scri…
▾ Sunlitxunruicms · xunruicmsEPSS 0.27%via NVD
CVE-2025-14006Low· 3.5A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1
A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validatio…
▾ Sunlitxunruicms · xunruicmsEPSS 0.27%via NVD