Skip to content
OpenAdvisories

Vendor

xuemian168

2 known vulnerabilities.

Products

kuno 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-61768

    Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload

    KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially craf…

    xuemian168 kuno
  • Medium 5.4
    CVE-2025-61681

    Kuno is Vulnerable to Stored XSS Attack via SVG File Upload

    KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, …

    xuemian168 kuno