Product by Dayrui
XunRuiCMS
13 known vulnerabilities in XunRuiCMS (Dayrui), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-120349 | dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection | 7.3 | |
| High | CVE-2026-120348 | dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection | 7.3 | |
| High | CVE-2026-120347 | dayrui XunRuiCMS Member View.php View sql injection | 7.3 | |
| Critical | CVE-2025-1177 | dayrui XunRuiCMS Linkage.php import_add deserialization | 6.3 | |
| Critical | CVE-2025-1186 | dayrui XunRuiCMS Api.php deserialization | 6.3 | |
| Medium | CVE-2026-101018 | dayrui XunruiCMS Group Editing Home.php group_all_edit sql injection | 4.7 | |
| Critical | CVE-2025-14004 | dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery | 4.7 | |
| High | CVE-2025-14008 | dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery | 4.7 | |
| Medium | CVE-2025-15144 | dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting | 4.3 | |
| Medium | CVE-2025-14006 | dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting | 3.5 | |
| Medium | CVE-2025-14005 | dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting | 2.4 | |
| Medium | CVE-2025-2131 | dayrui XunRuiCMS Friendly Links cross site scripting | 2.4 | |
| Medium | CVE-2025-14007 | dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting | 2.0 |