This page aggregates publicly disclosed CVE and security risk information related to chemcms_project, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2018-16346 | ChemCMS 1.0.6 has XSS via the "setting -> website information" field. | [email protected] | 4.8 | 0.56% | 2018-09-02 | 2026-06-16 |
| CVE-2018-10295 | ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account. | [email protected] | 8.8 | 0.52% | 2018-04-22 | 2026-06-16 |