Hyweb Hycms-j1 — known CVE vulnerabilities

Every CVE whose affected-product data names Hyweb Hycms-j1, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-22847 — CVSS 8.8 (high): Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands without privilege.
• CVE-2021-22849 — CVSS 4.6 (medium): Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a…