Pivotx vulnerabilities

Products

• Pivotx 16

Newest

• pivotx Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute... CVE-2025-52367 Public exploit 5.4 MediumSeptember 22, 2025
• pivotx lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users,... CVE-2017-14958 7.2 HighOctober 1, 2017
• pivotx The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI,... CVE-2017-9332 6.1 MediumJune 6, 2017
• pivotx PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors... CVE-2017-8402 8.8 HighMay 31, 2017
• pivotx PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by... CVE-2017-7570 8.8 HighApril 7, 2017
• pivotx Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers... CVE-2015-5458 6.8 MediumJuly 8, 2015
• pivotx PivotX before 2.3.11 does not validate the new file extension when renaming a file with multiple... CVE-2015-5457 7.5 HighJuly 8, 2015
• pivotx Cross-site scripting (XSS) vulnerability in the form method in modules/formclass.php in PivotX... CVE-2015-5456 4.3 MediumJuly 8, 2015
• pivotx Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow... CVE-2014-0342 7.5 HighApril 15, 2014
• pivotx Multiple cross-site scripting (XSS) vulnerabilities in PivotX before 2.3.9 allow remote... CVE-2014-0341 3.5 LowApril 15, 2014
• pivotx Cross-site scripting (XSS) vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier... CVE-2012-2274 Public exploit 4.3 MediumAugust 13, 2012
• pivotx The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of... CVE-2011-1035 7.5 HighFebruary 18, 2011
• pivotx pivotx/modules/module_image.php in PivotX 2.2.2 allows remote attackers to obtain sensitive... CVE-2011-0775 5.0 MediumFebruary 4, 2011
• pivotx PivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request... CVE-2011-0774 5.0 MediumFebruary 4, 2011
• pivotx Cross-site scripting (XSS) vulnerability in pivotx/modules/module_image.php in PivotX before 2.2... CVE-2011-0773 Public exploit 4.3 MediumFebruary 4, 2011
• pivotx Multiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, and possibly other versions... CVE-2011-0772 Public exploit 4.3 MediumFebruary 4, 2011