CVE-2026-120347 | dayrui XunRuiCMS up to 4.7.4 Member View.php View catid sql injection

A vulnerability labeled as critical has been found in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection.

This vulnerability is registered as CVE-2026-120347. It is possible to launch the attack remotely. Furthermore, an exploit is available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More