Snewscms maintains a focused content management system product line centered around its Snews and Snewscms Rus offerings, with a durable signal in web application input-handling and file-upload controls. The vulnerability profile reflects recurrent weaknesses in cross-site scripting, cross-site request forgery, and unrestricted file uploads that are characteristic of web-based publishing platforms. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Snewscms over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-20052CRITICAL Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snews_files direct | Apr 4, 2026 | 9.8 | 35 | NO | NO |
CVE-2016-20051MEDIUM Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms. | Apr 4, 2026 | 5.3 | 21 | NO | NO |
CVE-2011-2706MEDIUM A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71. | Jan 14, 2020 | 6.1 | 21 | NO | NO |
CVE-2007-5303MEDIUM Cross-site scripting (XSS) vulnerability in news_page.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitrary web script or HTML via the page_id parameter. | Oct 9, 2007 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Snewscms.
Media articles that mention a CVE ID that affects a product developed by Snewscms — matched by CVE ID, not by vendor name.