MuYuCMS vulnerabilities
We track 5 vulnerabilities in MuYuCMS products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on February 24, 2026.
Latest MuYuCMS vulnerabilities
- 7.2 High severity
MuYuCMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was determined in MuYuCMS 2.7. Affected is the function delete_dir_file of the file application/admin/controller/Template.php of the component Template Management Page. This manipulation of the argument temn/tp causes path traversal. It is poss
- 7.2 High severity
MuYuCMS: Improper Control of Generation of Code
A security flaw has been discovered in MuYuCMS up to 2.7. Affected by this issue is some unknown functionality of the file /admin.php of the component Template Management. The manipulation results in code injection. It is possible to launch the attack remotely
- 8.8 High severity
MuYuCMS: Server-Side Request Forgery
A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remo
- 8.1 High severity
MuYuCMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in MuYuCMS 2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin.php/accessory/filesdel.html. The manipulation of the argument filedelur leads to relative path traversal. The at
- 8.8 High severity
MuYuCMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in MuYuCMS 2.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /editor/index.php. The manipulation of the argument file_path leads to relative path traversal. The attack can