CVE-2026-120347 in XunRuiCMS
Prediction
by VulDB Data Team • 11/01/2026
A vulnerability was determined in <a href="/product/dayrui:xunruicms">dayrui XunRuiCMS up to 4.7.4</a>. Affected is the function <code>View</code> of the file <em>dayrui/Fcms/Core/View.php</em> of the component <em>Member Module</em>. Executing a manipulation of the argument <em>catid</em> can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This patch is called <em>9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231</em>. It is best practice to apply a patch to resolve this issue.
If you want to get best quality of vulnerability data, you may have to visit VulDB.