Hycms J1

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-22849 MEDIUM This Month

Hyweb HyCMS-J1 backend editing function does not filter special characters. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Hycms J1

NVD

CVSS 3.1

5.4

EPSS

0.5%

CVE-2021-22847 HIGH This Week

Hyweb HyCMS-J1's API fail to filter POST request parameters. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Hycms J1

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2021-22849

EPSS 1% CVSS 5.4

MEDIUM This Month

XSS Hycms J1

NVD

CVE-2021-22847

EPSS 2% CVSS 8.8

HIGH This Week

Hyweb HyCMS-J1's API fail to filter POST request parameters. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Hycms J1

NVD