Skip to contentGetkirby vulnerabilities
Newest
- getkirby kirbyCross-site scripting (XSS) from image block content in the site frontendCVE-2021-41258Fix available7.3 High
- getkirby kirbyCross-site scripting (XSS) from writer field content in the site frontendCVE-2021-41252Fix available7.3 High
- getkirby kirbyCross-site scripting (XSS) from field and configuration text displayed in the PanelCVE-2021-32735Fix available7.1 High
- getkirby kirbyCross-site scripting (XSS) from unsanitized uploaded SVG filesCVE-2021-29460Public exploitFix available7.6 High
- getkirby kirby, panel +1 morePHP Phar archives could be uploaded and executed in KirbyCVE-2020-26255Fix available6.8 Medium
- getkirby kirby, panel +1 more.dev domains treated as local in KirbyCVE-2020-26253Fix available6.8 Medium
- getkirby kirbyKirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the...CVE-2018-166234.8 Medium
- getkirby kirbypanel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page.CVE-2018-166245.4 Medium
- getkirby kirbyKirby XSS VulnerabilityCVE-2018-166304.8 Medium
- getkirby kirbypanel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.CVE-2018-166276.1 Medium
- getkirby kirbypanel/login in Kirby v2.5.12 allows XSS via a blog name.CVE-2018-166285.4 Medium
- getkirby panelKirby XSS VulnerabilityCVE-2017-16807Public exploitFix available5.4 Medium