SSanluan

Products

Exploited and recent CVEs

• CVE-2026-121583 Medium 6.3 Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization 0.3%
• CVE-2026-120319 Medium 6.3 Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization 0.3%
• CVE-2026-110113 Medium 4.3 PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint 0.3%
• CVE-2026-97721 Low 2.7 Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization 0.2%
• CVE-2026-8740 Medium 6.3 Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine 0.2%
• CVE-2026-8739 Medium 5.3 Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key 0.3%
• CVE-2026-8738 Medium 6.5 Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error 0.3%
• CVE-2026-8737 Medium 5.3 Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication 0.4%
• CVE-2026-6797 Medium 4.3 Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption 0.3%
• CVE-2026-6796 Medium 4.3 Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file 0.1%
• CVE-2026-5987 Medium 4.7 Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine 0.2%
• CVE-2026-3289 Medium 6.3 Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal 0.8%
• CVE-2026-2010 Medium 4.2 Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization 0.4%
• CVE-2026-1112 Medium 5.4 Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization 0.4%
• CVE-2026-1111 Medium 4.7 Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal 0.7%
• CVE-2025-7953 Low 3.5 Sanluan PublicCMS viewer.html redirect 0.4%
• CVE-2025-7949 Low 3.5 Sanluan PublicCMS preview.html redirect 0.4%
• CVE-2024-11070 Low 3.5 Sanluan PublicCMS Tag Type save cross site scripting 0.4%
• CVE-2022-3950 Low 3.5 sanluan PublicCMS Tab dwz.min.js initLink cross site scripting 0.5%