cms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CM

Product

cms

by light0011 · last CVE Oct 18, 2026

13

CVEs

0

On KEV

7.3

Max CVSS

4

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 6Medium 6Low 1

Severity

All severities13 Critical0 High6 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add cms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-112025	7.3	0%	Oct 18	light0011 cms Captcha Validation UserController.class.php access control Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-86306	7.3	1%	Sep 7	light0011 cms Cookie Helper UserModel.class.php improper authentication Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-86305	7.3	0%	Sep 7	light0011 cms Upload.class.php upload unrestricted upload Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-85380	7.3	0%	Sep 4	light0011 cms UEditor controller.php catchimage server-side request forgery Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-85379	7.3	0%	Sep 4	light0011 cms Query Builder ChapterController.class.php searchChapter sql injection Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930
CVE-2026-85378	7.3	1%	Sep 3	light0011 cms Chapter Controller ChapterController.class.php _initialize authorization Affected: c774dce31c6df0055568a8d5c53d964d99be199d; f72cf46f601efb2a0618c3814cc2f61380b38930