Sanluan vulnerabilities
We track 3 vulnerabilities in Sanluan products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2026.
Latest Sanluan vulnerabilities
- 9.8 Critical severity
PublicCMS: Improper Limitation of a Pathname to a Restricted Directory
A weakness has been identified in Sanluan PublicCMS 6.202506.d. This impacts the function saveMetadata of the file TemplateCacheComponent.java of the component Template Cache Generation. Executing a manipulation can lead to path traversal. The attack can be ex
- 8.1 High severity
PublicCMS: Incorrect Privilege Assignment
A vulnerability was found in Sanluan PublicCMS up to 5.202506.d. Affected is the function delete of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java of the component Trade Address Deletion Endpoint. Performi
- 7.2 High severity
PublicCMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplateAdminController.java of the component Task Template Management Handler. Such manipulation of the arg