Classcms Project Classcms — known CVE vulnerabilities

Every CVE whose affected-product data names Classcms Project Classcms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-45966 — CVSS 9.8 (critical): here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.
• CVE-2022-25582 — CVSS 5.4 (medium): A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web…
• CVE-2024-6932 — CVSS 3.5 (low): A vulnerability was found in ClassCMS 4.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality…