Nucleuscms Nucleus Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Nucleuscms Nucleus Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-37770 — CVSS 7.2 (high): Nucleus CMS v3.71 is affected by a file upload vulnerability. In this vulnerability, we can use upload to change the upload path to the…
• CVE-2018-16636 — CVSS 6.5 (medium): Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.
• CVE-2011-3760 — CVSS 5.0 (medium): Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation…
• CVE-2015-5454 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title…