Skip to content
OpenAdvisories

Product · 1Panel-dev

CordysCRM

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-10567

    1Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross site scripting

    A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the function Save of the file src/main/java/cn/cordys/crm/system/service/ModuleFormService.java of the component ModuleFormController. The manipulation of the argumen…

    1Panel-dev CordysCRM
  • Low 2.4
    CVE-2026-10514

    1Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting

    A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimConfig.java. The manipulation leads to cross site scripting. Remote exploitation …

    1Panel-dev CordysCRM