Threats affecting pkg:maven/sanluan/publiccms

CVE-2026-109160 is an open redirect vulnerability in PublicCMS version 5.202608.a. The issue exists in the SafeConfigComponent.getSafeUrl function within the pay Endpoint component. Manipulating the returnUrl argument can cause an open redirect, which can be triggered remotely. The vulnerability has a medium severity rating with a CVSS score of 5.3. The vendor has not responded to the disclosure, and no patch or remediation is currently confirmed.

CVE-2026-8740 is a medium severity vulnerability in Sanluan PublicCMS version 5.202506.d. It involves improper neutralization of special elements in the template engine within the execute function of TemplateResultDirective.java. This flaw allows remote attackers to manipulate templateContent arguments, potentially leading to unintended behavior. An exploit has been published, but there is no vendor response or official patch available at this time.

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefile_key results in use of hard-coded cryptographic key . The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d. Impacted is the function TradeOrderController.pay/TradePaymentController.pay/AccountGatewayComponent.pay of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeOrderController.java of the component Trade Payment Flow. The manipulation leads to business logic errors. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-6797 is a medium severity vulnerability in Sanluan PublicCMS versions up to 6.202506.d. It involves the ZipSecureFile.setMinflateRatio function in the DocToHtmlUtils.java file, where crafted input can cause resource consumption. The vulnerability can be exploited remotely without user interaction or privileges. The vendor has not responded to the disclosure, and no patch or official remediation is currently available.

A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the function log_login of the file core/src/main/java/com/publiccms/controller/admin/LoginAdminController.java of the component Failed Login Handler. This manipulation of the argument errorPassword causes cleartext storage in a file or on disk. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

A weakness has been identified in Sanluan PublicCMS 6.202506.d. This impacts the function saveMetadata of the file TemplateCacheComponent.java of the component Template Cache Generation. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Sanluan PublicCMS up to 5.202506.d. Affected is the function delete of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java of the component Trade Address Deletion Endpoint. Performing a manipulation of the argument ids results in improper authorization. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.