本页列出影响 classcms_project classcms 的已公开 CVE 漏洞（通过 NVD CPE 关联）。每行包含严重程度评分、摘要与发布日期，便于识别与分析安全问题。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2024-6932 | A vulnerability was found in ClassCMS 4.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/?action=home&do=shop:index&keyword=&kind=all. The manipulation of the argument order leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271987. | [email protected] | 5.3 | 0.42% | 2024-07-20 | 2024-11-21 |
| CVE-2022-45966 | here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5. | [email protected] | 9.8 | 0.73% | 2022-12-22 | 2025-04-15 |
| CVE-2022-25582 | A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field. | [email protected] | 5.4 | 0.55% | 2022-03-25 | 2024-11-21 |