Dayrui vulnerabilities
We track 7 vulnerabilities in Dayrui products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest Dayrui vulnerabilities
- 7.3 High severity
XunRuiCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code i
- 7.3 High severity
XunRuiCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_content of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The
- 7.3 High severity
XunRuiCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to laun
- 7.2 High severity
XunRuiCMS: Server-Side Request Forgery
A flaw has been found in dayrui XunRuiCMS up to 4.7.1. This vulnerability affects unknown code of the file admin79f2ec220c7e.php?c=api&m=test_site_domain of the component Project Domain Change Test. This manipulation of the argument v causes server-side reques
- 9.8 Critical severity
XunRuiCMS: Server-Side Request Forgery
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1. Affected is an unknown function of the file /admind45f74adbd95.php?c=email&m=add of the component Email Setting Handler. Performing a manipulation results in server-side request forgery. Remo
- 9.8 Critical severity
A vulnerability was found in dayrui XunRuiCMS up to 4.6.4.
A vulnerability was found in dayrui XunRuiCMS up to 4.6.4. It has been declared as critical. This vulnerability affects unknown code of the file /Control/Api/Api.php. The manipulation of the argument thumb leads to deserialization. The attack can be initiated
- 9.8 Critical severity
XunRuiCMS: Deserialization of Untrusted Data
A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function import_add of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization. It is possible to launch the attack remot