Alchemy-cms Alchemy Cms vulnerabilities

• alchemy-cms alchemy cms AlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper CVE-2026-23885 Public exploitFix available 6.4 MediumJanuary 19, 2026
• alchemy-cms alchemy cms Withdrawn Advisory: AlchemyCMS is vulnerable to stored XSS via the /admin/pictures image field CVE-2018-18307 Disputed 6.1 MediumOctober 16, 2018