Pagekit vulnerabilities

Products

• Pagekit 14

Newest

• pagekit Pagekit CMS 1.0.18 Privilege Escalation via UserApiController CVE-2026-57518 8.7 HighJune 26, 2026
• pagekit cms Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injection CVE-2026-6652 5.1 MediumApril 20, 2026
• pagekit Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component CVE-2025-67165 9.8 CriticalDecember 17, 2025
• pagekit Pagekit CMS is vulnerable to OS Command Injection via Storage component CVE-2025-67164 9.9 CriticalDecember 17, 2025
• pagekit Pagekit Cross-site Scripting vulnerability CVE-2024-45967 4.7 MediumOctober 1, 2024
• pagekit Command injection in pagekit CVE-2023-41005 7.8 HighAugust 28, 2023
• pagekit Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type CVE-2022-38916 EPSS 18.3% 9.8 CriticalSeptember 20, 2022
• pagekit Pagekit CMS cross-site scripting in Markdown text box where articles are edited CVE-2022-36573 6.1 MediumAugust 28, 2022
• pagekit SQL injection in pagekit/pagekit CVE-2021-44135 9.8 CriticalApril 1, 2022
• pagekit Cross-site scripting in PageKit CVE-2021-32245 5.4 MediumJune 16, 2021
• pagekit Pagekit File Upload vulnerability CVE-2019-19013 8.8 HighNovember 22, 2019
• pagekit Pagekit User enumeration CVE-2019-16669 5.3 MediumSeptember 21, 2019
• pagekit Pagekit open redirect vulnerability CVE-2018-14381 Fix available 6.1 MediumJuly 18, 2018
• pagekit Pagekit Stored Cross-site Scripting CVE-2018-11564 Public exploit 4.8 MediumJune 1, 2018
• pagekit Pagekit Weak Password Recovery Mechanism for Forgotten Password CVE-2017-5594 Public exploitFix available 7.5 HighJanuary 25, 2017