What’s Vulnerable › Products

Dreamer CMS vulnerabilities

40 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Dreamer CMS version is affected

Latest Dreamer CMS vulnerabilities

• CVE-2025-10320 — iteachyou Dreamer CMS updatePwd weak password (CVSS 3.1)
• CVE-2025-3977 — iteachyou Dreamer CMS Attachment download improper authorization (CVSS 4.3)
• CVE-2025-1548 — iteachyou Dreamer CMS edit cross site scripting (CVSS 4.6)
• CVE-2025-1543 — iteachyou Dreamer CMS ueditor-1.4.3.3 path traversal (CVSS 4.3)
• CVE-2024-3311 — Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal (CVSS 8.8)
• CVE-2024-3118 — Dreamer CMS Attachment permission (CVSS 8.8)
• CVE-2024-25811 — (CVSS 6.5)
• CVE-2024-2354 — Dreamer CMS toEdit cross-site request forgery (CVSS 6.5)
• CVE-2023-7091 — Dreamer CMS uploadFile unrestricted upload (CVSS 8.8)
• CVE-2023-50017 — (CVSS 8.8)
• CVE-2023-49484 — (CVSS 5.4)
• CVE-2023-48914 — (CVSS 8.8)
• CVE-2023-48913 — (CVSS 8.8)
• CVE-2023-48912 — (CVSS 8.8)
• CVE-2023-46887 — (CVSS 7.5)
• CVE-2023-46886 — (CVSS 9.1)
• CVE-2023-48017 — (CVSS 8.8)
• CVE-2023-48021 — (CVSS 8.8)
• CVE-2023-48020 — (CVSS 8.8)
• CVE-2023-48063 — (CVSS 4.3)
• CVE-2023-48060 — (CVSS 8.8)
• CVE-2023-48058 — (CVSS 8.8)
• CVE-2023-45907 — (CVSS 8.8)
• CVE-2023-45906 — (CVSS 8.8)
• CVE-2023-45905 — (CVSS 8.8)