Skip to contentGetkirby Kirby vulnerabilities
- getkirby kirbyCross-site scripting (XSS) from field and configuration text displayed in the PanelCVE-2021-32735Fix available7.1 High
- getkirby kirbyCross-site scripting (XSS) from unsanitized uploaded SVG filesCVE-2021-29460Public exploitFix available7.6 High
- getkirby kirby, panel +1 morePHP Phar archives could be uploaded and executed in KirbyCVE-2020-26255Fix available6.8 Medium
- getkirby kirby, panel +1 more.dev domains treated as local in KirbyCVE-2020-26253Fix available6.8 Medium
- getkirby kirbyKirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the...CVE-2018-166234.8 Medium
- getkirby kirbypanel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page.CVE-2018-166245.4 Medium
- getkirby kirbyKirby XSS VulnerabilityCVE-2018-166304.8 Medium
- getkirby kirbypanel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.CVE-2018-166276.1 Medium
- getkirby kirbypanel/login in Kirby v2.5.12 allows XSS via a blog name.CVE-2018-166285.4 Medium