cms vulnerabilities

6 known vulnerabilities in cms from Light0011. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  cms: Incorrect Privilege Assignment

  CVE-2026-112025Oct 18, 2026Light0011

  A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an unknown function of the file App/Home/Controller/UserController.class.php of the component Captcha Validation. Ex

• 7.3 High severity

  cms: Improper Authentication

  CVE-2026-86306Sep 7, 2026Light0011

  A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulat

• 7.3 High severity

  cms: Improper Access Control

  CVE-2026-86305Sep 7, 2026Light0011

  A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function Upload::upload of the file ThinkPHP/Library/Think/Upload.class.php. Performing a mani

• 7.3 High severity

  cms: Server-Side Request Forgery

  CVE-2026-85380Sep 4, 2026Light0011

  A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects the function catchimage of the file Public/ueditor/php/controller.php of the component UEditor. This m

• 7.3 High severity

  cms: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-85379Sep 4, 2026Light0011

  A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::searchChapter of the file App/Home/Controller/ChapterController.class.php of the com

• 7.3 High severity

  cms: Improper Authorization

  CVE-2026-85378Sep 3, 2026Light0011

  A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function AuthController::_initialize of the file App/Admin/Controller/ChapterController.class.php o