CyberSecBulletin

Shishuocms vulnerabilities

We track 2 vulnerabilities in Shishuocms products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 4, 2025.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Shishuocms vulnerabilities

  • 8.8 High severity

    shishuocms: Cross-Site Request Forgery

    CVE-2025-1891Shishuocms

    A vulnerability was found in shishuocms 1.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and

  • 9.8 Critical severity

    shishuocms: Unrestricted Upload of File with Dangerous Type

    CVE-2025-1890Shishuocms

    A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to u