Baicloud-cms Project Baicloud-cms — known CVE vulnerabilities

Every CVE whose affected-product data names Baicloud-cms Project Baicloud-cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-41729 — CVSS 9.1 (critical): BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the…
• CVE-2021-44302 — CVSS 8.8 (high): BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in…