VendorsWBCEwbce_cms1.5.2
Vulnerabilities

WBCE CMS 1.5.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2022-50936
WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)
Published 2026-01-13 · Analyzed
8.8EPSS 0.009
CVE-2022-25099
A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file.
Published 2022-02-23 · Modified
7.8EPSS 0.012
CVE-2022-25101
A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file.
Published 2022-02-23 · Modified
7.8EPSS 0.012
CVE-2022-28477
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS).
Published 2022-04-28 · Modified
6.1EPSS 0.010
CVE-2022-30073
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.
Published 2022-05-17 · Modified
5.4EPSS 0.016
CVE-2022-30072
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters.
Published 2022-05-17 · Modified
5.4EPSS 0.009