rawchen ecms vulnerabilities

Latest rawchen ecms CVEs

Newest publication first

1. CVE-2025-15149 rawchen ecms Add New Product updateProductServlet.java updateProductServlet cross site scripting

   Published 2025-12-28

   Medium·CVSS 4.8 EPSS 0.25%

   A vulnerability has been found in rawchen ecms up to b59d7feaa9094234e8aa6c8c6b290621ca575ded. Affected by this vulnerability is the function updateProductServlet of the file src/servlet/product/updateProductServlet.java of the component Add New Product Page. The manipulation of...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.