Skip to contentAjax30 Bravecms-2.0 vulnerabilities
- ajax30 bravecms-2.0Ajax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade TemplateCVE-2026-415767.1 High
- ajax30 bravecms-2.0Ajax30/BraveCMS-2.0: Stored XSS in Page / Article ContentCVE-2026-415248.7 High
- ajax30 bravecms, bravecms-2.0 +1 moreBrave CMS has an Insecure Direct Object Reference in Article Image DeletionCVE-2026-351837.1 High
- ajax30 bravecms, bravecms-2.0 +1 moreMissing Authorization Privilege EscalationCVE-2026-351828.8 High
- ajax30 bravecms, bravecms-2.0 +1 moreBrave CMS Sffected by Unrestricted File Upload via CKEditor EndpointCVE-2026-351648.8 High
- ajax30 bravecms, bravecms-2.0 +1 moreBrave CMS has Unrestricted File Upload in BraveCMS via CKEditor EndpointCVE-2026-350479.3 Critical