xunruicms has 3 CVEs on record. The busiest recent month was December 2025 with 3. The median CVSS is 3.5 (low). The dominant weakness classes are CWE-79 (3) and CWE-94 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 3.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
xunruicms vulnerabilities
CVEs affecting xunruicms, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-15144Medium· 4.3A weakness has been identified in dayrui XunRuiCMS up to 4.7.1
A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function dr_show_error/dr_exit_msg of the file /dayrui/Fcms/Init.php of the component JSONP Callback Handler. This manipulation of the argument c…
CVE-2025-14007Low· 2.0A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1
A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scri…
CVE-2025-14006Low· 3.5A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1
A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validatio…