CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120347
HIGHCVSS 7.3NVD feed
Published 2 November 2026 · tracked since 2 November 2026
Description
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit has
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog