Login Request a demo
CM
Product
cms
by light0011 · last CVE Oct 18, 2026
13
CVEs
0
On KEV
7.3
Max CVSS
4
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 6Medium 6Low 1
Severity
All severities13Critical0High6Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112025
7.3
0%
Oct 18
light0011 cms Captcha Validation UserController.class.php access control
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-86306
7.3
1%
Sep 7
light0011 cms Cookie Helper UserModel.class.php improper authentication
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-86305
7.3
0%
Sep 7
light0011 cms Upload.class.php upload unrestricted upload
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-85380
7.3
0%
Sep 4
light0011 cms UEditor controller.php catchimage server-side request forgery
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-85379
7.3
0%
Sep 4
light0011 cms Query Builder ChapterController.class.php searchChapter sql injection
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-85378
7.3
1%
Sep 3
light0011 cms Chapter Controller ChapterController.class.php _initialize authorization
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-112028
6.5
0%
Oct 18
light0011 cms Vote VoteController.class.php logic error
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-112027
5.3
0%
Oct 18
light0011 cms Uploadify check-exists.php file_exists file information disclosure
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-86308
5.3
1%
Sep 7
light0011 cms Debug Mode config.php information disclosure
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-85381
5.3
1%
Sep 4
light0011 cms Chapter Controller ChapterController.class.php authorization
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-86307
4.3
0%
Sep 7
light0011 cms cross-site request forgery
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-85382
4.3
0%
Sep 4
light0011 cms Chapter Content Output oneChapter.tpl htmlspecialchars_decode cross site scripting
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-112026
3.7
0%
Oct 18
light0011 cms UserModel.class.php sha1 weak password hash
Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
Showing 13