CNNVD-202507-3918 Information

CNNVD ID

CNNVD-202507-3918

CVE-2025-50270

  • CNNVD Published: 2025-07-31

Description (Chinese)

AnQiCMS是Sinclair个人开发者的一个AnQiCMS是一款基于Go语言开发,具备高安全性、高性能和易扩展性的企业级内容管理系统。 AnQiCMS v.3.4.11版本存在安全漏洞,该漏洞源于存储型跨站脚本漏洞,可能导致执行任意代码。

Description (English)

An QiCMS, an An QiCMS of the Sinclair personal developer, is an enterprise-level content management system based on Go language, with high security, high performance and easy to expand. The version of AnQiCMS v. 3.4.11 contains a security loophole that originates from a storage-type cross-site script loophole, which may lead to the implementation of any code.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-07-31

Last Modified

2026-02-24

References

https://github.com/fesiong/anqicms/issues/80 https://gist.github.com/Baotong-Wu/1988181a78a797204a75d399af284f7c https://access.redhat.com/security/cve/cve-2025-50270

Share on: