Bosscms vulnerabilities
We track 3 vulnerabilities in Bosscms products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 25, 2024.
3vulnerabilities
1critical
2high
0exploited
8.2average CVSS score
Latest Bosscms vulnerabilities
- 7.1 High severity
simple_school_management_system: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration.
- 7.8 High severity
Bosscms: Incorrect Authorization
Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component.
- 9.8 Critical severity
Bosscms: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.