CVE-2026-120348

Published 2 November 2026 · tracked since 2 November 2026

Description

A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_content of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The ex

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-120428 MEDIUM 6.1
• CVE-2026-120318 HIGH 7.2
• CVE-2026-109083
• CVE-2026-110535
• CVE-2026-111959
• CVE-2026-113511
• CVE-2026-113687
• CVE-2026-114364
• CVE-2026-102802
• CVE-2026-103419

→ Open the live CVE board · all tools