SEMCMS vulnerabilities
CVEs whose affected-version data names the SEMCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-108814Medium· 6.3PoCA flaw has been found in SEMCMS up to 5.0
A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a manipulation can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published a…
CVE-2026-108813Medium· 6.3PoCA vulnerability was detected in SEMCMS up to 5.0
A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit is now pu…
CVE-2026-108812Medium· 6.5PoCA security vulnerability has been detected in SEMCMS up to 5.0
A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be pe…
CVE-2026-96739Medium· 4.3PoCA flaw has been found in SEMCMS up to 4.2
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/upload_json.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross si…