Skip to contentCraftcms Cms vulnerabilities
- craftcms craft cmsCraft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields pageCVE-2022-37247Fix available5.4 Medium
- craftcms craft cmsCraft CMS Cross site Scripting vulnerabilityCVE-2022-37248Fix available5.4 Medium
- craftcms craft cmsCraft CMS Stored Cross-site Scripting in User Addresses TitleCVE-2022-37250Fix available5.4 Medium
- craftcms craft cmsImproper account password reset in Craft CMSCVE-2022-29933Fix available8.8 High
- craftcms craft cmsCross-site Scripting in craftcms/cmsCVE-2022-28378Fix available6.1 Medium
- craftcms craft cmsCSV Injection VulnerabilityCVE-2021-41824Fix available8.8 High
- craftcms craft cmsCraft CMS Remote Code InjectionCVE-2021-27903Fix available9.8 Critical
- craftcms craft cmsCraft CMS Cross-site Scripting VulnerabilityCVE-2021-27902Fix available6.1 Medium
- craftcms craft cmsCraft CMS Cross-site Scripting VulnerabilityCVE-2021-32470Fix available6.1 Medium
- craftcms craft cmsCraft CMS Cross-site Scripting VulnerabilityCVE-2020-19626Fix available5.4 Medium
- craftcms craft cmsSEOmatic for CraftCMS allows Server-Side Template InjectionCVE-2020-9757Fix availableEPSS 72.8%9.8 Critical
- craftcms craft cmsIn the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field...CVE-2019-9554Public exploit6.1 Medium
- craftcms craft cmsCraft CMS possibility of brute force attemptsCVE-2019-15929Fix available9.8 Critical
- craftcms craft cmsCraft CMS XSS VulnerabilityCVE-2019-17496Fix available6.1 Medium
- craftcms craft cmsIn some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from...CVE-2019-14280Public exploit5.3 Medium
- craftcms craft cmsCraft CMS XSS VulnerabilityCVE-2019-12823Fix available6.1 Medium
- craftcms craft cmsCraft CMS Vulnerable to Server-Side Template InjectionCVE-2018-204657.2 High
- craftcms craft cmsCraft CMS Cross-site Scripting (XSS) VulnerabilityCVE-2018-20418Public exploit4.8 Medium
- craftcms craft cmsCraft CMS PHP Code Injection VulnerabilityCVE-2018-38148.8 High
- craftcms craft cmsCraft CMS XSS VulnerabilityCVE-2017-9516Public exploitFix available5.4 Medium
- craftcms craft cmsCraft CMS subject to URL forgeryCVE-2017-8385Fix available5.3 Medium
- craftcms craft cmsCraft CMS XSS VulnerabilityCVE-2017-8384Fix available6.1 Medium
- craftcms craft cmsCraft CMS Unauthorized ViewCVE-2017-8383Fix available5.3 Medium
- craftcms craft cmsCraft CMS XSS VulnerabilityCVE-2017-8052Fix available6.1 Medium