Skip to content
Craftercms vulnerabilities
Newest
-
craftercms
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
CVE-2026-1770
Fix available
4.5 Medium
-
craftercms
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
CVE-2025-6384
Public exploitFix available
7.3 High
-
craftercms
Transmission of Private Resources into a New Sphere in Crafter Engine
CVE-2025-0502
6.9 Medium
-
craftercms
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafter Engine
CVE-2023-4136
Fix available
7.4 High
-
craftcms cms, craft cms, craftercms +2 more
CraftCMS stored XSS in Quick Post widget error message
CVE-2023-33194
Fix available
3.7 Low
-
craftercms, craftercms crafter cms +1 more
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crafter Studio
CVE-2023-26020
5.7 Medium
-
crafter software cms, craftercms crafter cms +1 more
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
CVE-2022-40635
Public exploitFix available
6.4 Medium
-
crafter software cms, craftercms crafter cms +1 more
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
CVE-2022-40634
Public exploitFix available
6.4 Medium
-
crafter software cms, craftercms crafter cms +1 more
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
CVE-2021-23267
Fix available
7.6 High
-
crafter software cms, craftercms crafter cms +1 more
Improper Output Neutralization for Logs in Crafter Studio
CVE-2021-23266
Fix available
4.3 Medium
-
crafter software cms, craftercms crafter cms +1 more
Improper Privilege Management in Crafter Studio
CVE-2021-23265
Fix available
3.5 Low
-
crafter software cms, craftercms crafter cms +1 more
Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search
CVE-2021-23264
Fix available
8.1 High
-
crafter software cms, craftercms crafter cms +1 more
Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine
CVE-2021-23263
5.9 Medium
-
crafter software cms, craftercms crafter cms +1 more
Snakeyaml deserialization vulnerability bypass
CVE-2021-23262
4.2 Medium
-
crafter software cms, craftercms crafter cms +1 more
Overriding the system configuration file causes a denial of service
CVE-2021-23261
4.5 Medium
-
crafter software cms, craftercms crafter cms +1 more
Stored XSS Vulnerability in File Name of the File Upload function
CVE-2021-23260
6.5 Medium
-
crafter software cms, craftercms crafter cms +1 more
Groovy Sandbox Bypass
CVE-2021-23259
4.2 Medium
-
crafter software cms, craftercms crafter cms +1 more
Spring SPEL Expression Language Injection
CVE-2021-23258
4.2 Medium
-
craftercms crafter cms
Missing Authorization in Crafter CMS
CVE-2017-15680
Fix available
6.5 Medium
-
craftercms crafter cms
Path Traversal in Crafter CMS Crafter Studio
CVE-2017-15681
Fix available
9.8 Critical
-
craftercms crafter cms
Cross site scripting in Crafter CMS
CVE-2017-15682
Fix available
6.1 Medium
-
craftercms crafter cms
XML injection in Crafter CMS
CVE-2017-15683
Fix available
8.6 High
-
craftercms crafter cms
Path Traversal in Crafter CMS Crafter Studio
CVE-2017-15684
Fix available
7.5 High
-
craftercms crafter cms
XML Injection in Crafter CMS Crafter Studio 3.0.1
CVE-2017-15685
Fix available
8.6 High
-
craftercms crafter cms
Cross-site scripting in Crafter CMS Crafter Studio
CVE-2017-15686
Fix available
6.1 Medium
-
crafter software cms, craftercms studio +1 more
Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.
CVE-2020-25803
Fix available
4.2 Medium
-
crafter software cms, craftercms studio +1 more
Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.
CVE-2020-25802
Fix available
4.2 Medium
-
craftercms crafter cms
OS Command Injection in craftercms:crafter-studio
CVE-2018-19907
8.8 High