PHPEMS vulnerabilities
We track 3 vulnerabilities in PHPEMS products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 1, 2026.
Latest PHPEMS vulnerabilities
- 8.8 High severity
PHPEMS: Cross-Site Request Forgery
A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack may be launched remotely.
- 9.8 Critical severity
PHPEMS: Deserialization of Untrusted Data
A vulnerability, which was classified as critical, has been found in PHPEMS up to 1.0. Affected by this issue is the function index of the file app/weixin/controller/index.api.php. The manipulation of the argument picurl leads to deserialization. The exploit h
- 8.8 High severity
PHPEMS: Deserialization of Untrusted Data
A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The atta