CVE-2025-26136

< 2025-01-01

A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.

9.8CRITICAL

CVE-2024-57767

< 2025-01-01

MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.

8.6HIGH

CVE-2024-57766

< 2025-01-01

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField

9.1CRITICAL

CVE-2024-57765

< 2025-01-01

MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.

7.5HIGH

CVE-2024-57764

< 2025-01-01

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.

9.1CRITICAL

CVE-2024-57763

< 2025-01-01

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.

9.1CRITICAL

CVE-2024-57762

< 2025-01-01

MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.

7.5HIGH

CVE-2024-13139

all versions

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent o

6.3MEDIUM

CVE-2024-13138

all versions

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function

4.7MEDIUM

CVE-2024-13137

all versions

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestRespo

2.4LOW

CVE-2024-13136

all versions

A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function remember

6.3MEDIUM

CVE-2022-29309

all versions

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.

7.5HIGH

CVE-2021-46026

< 2022-12-19

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the ba

5.4MEDIUM

CVE-2021-46027

all versions

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. On

6.5MEDIUM