Skip to contentStatamic vulnerabilities
Newest
- statamic cms, statamic +1 moreStatamic CMS has Path Traversal in Asset UploadCVE-2024-52600Fix available5.3 Medium
- public cms, publiccms +1 morePublic CMS Voting Management save cross site scriptingCVE-2024-111755.3 Medium
- craftcms cms, craft cms +1 moreCraft has a Potential Remote Code Execution via missing path normalization & Twig SSTICVE-2024-52293Fix available7.2 High
- craftcms cms, craft cms +1 moreCraft Allows Attackers to Read Arbitrary System FilesCVE-2024-52292Fix available7.7 High
- craftcms cms, craft cms +1 moreCraft has a Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code ExecutionCVE-2024-52291Fix available8.5 High
- statamic cmsUmbraco CMS Dashboard frame cross site scriptingCVE-2024-10761Fix available6.9 Medium
- dingfanzu cmsdingfanzu CMS saveNewPwd.php sql injectionCVE-2024-92945.3 Medium
- craftcms cms, craft cms +1 moreCraft CMS stored XSS in breadcrumb list and title fieldsCVE-2024-45406Fix available5.5 Medium
- dingfanzu cmsdingfanzu CMS getBasicInfo.php sql injectionCVE-2024-83035.3 Medium
- dingfanzu cms, geeeeeeeek dingfanzu +1 moredingfanzu CMS chpwd.php sql injectionCVE-2024-83025.3 Medium
- dingfanzu cms, gitapp dingfanzu +1 moredingfanzu CMS checkin.php sql injectionCVE-2024-83016.9 Medium
- gila cms, gilacms gila cms +1 moreGila CMS HTTP POST Request page cross site scriptingCVE-2024-76575.3 Medium
- juzaweb cmsjuzaweb CMS Theme Editor default path traversalCVE-2024-75515.1 Medium
- bolt cms, boltcms bolt +1 moreBolt CMS Showcase Creation showcases cross site scriptingCVE-2024-73005.3 Medium
- bolt cms, boltcms bolt +1 moreBolt CMS Entry Preview page cross site scriptingCVE-2024-72995.3 Medium
- denkgroot spina, spina cms +1 moreSpina CMS media_folders cross-site request forgeryCVE-2024-71066.9 Medium
- craftcms cms, craft cms +1 moreCraft CMS Allows TOTP Token To Stay Valid After UseCVE-2024-41800Fix available4.8 Medium
- denkgroot spina, spina cms +1 moreSpina CMS cross-site request forgeryCVE-2024-70656.9 Medium
- flute cms, flute-cms flute +1 moreFlute CMS Notification ContentParser.php replaceContent code injectionCVE-2024-69475.1 Medium
- flute cms, flute-cms flute +1 moreFlute CMS list code injectionCVE-2024-69465.1 Medium
- flute cms, flute-cms flute +1 moreFlute CMS Avatar Upload Page ImagesController.php unrestricted uploadCVE-2024-69455.3 Medium
- statamic cmsPassword confirmation stored in plain text via registration form in statamic/cmsCVE-2024-36119Fix available1.8 Low
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS ThemesController.java ZipUtils.unZipFiles path traversalCVE-2024-33116.3 Medium
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS Attachment permissionCVE-2024-31186.3 Medium
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS toEdit cross-site request forgeryCVE-2024-23544.3 Medium
- statamic cms, statamic +1 moreStatamic account takeover via XSS and password reset linkCVE-2024-24570Fix available8.2 High
- foru cmsForU CMS cms_admin.php sql injectionCVE-2024-07295.5 Medium
- foru cmsForU CMS channel.php file inclusionCVE-2024-07284.7 Medium
- statamic cmsYunyou CMS Common.php unrestricted uploadCVE-2024-06487.3 High
- foru cmsForU CMS cms_template.php sql injectionCVE-2024-04266.3 Medium
- foru cmsForU CMS password recoveryCVE-2024-04255.3 Medium
- craftcms cms, craft cms +1 moreCraft CMS Privilege EscalationCVE-2024-21622Fix available5.4 Medium
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS uploadFile unrestricted uploadCVE-2023-70916.3 Medium
- statamic cms, statamic +1 moreStatamic CMS vulnerable to Cross-site Scripting via uploaded assetsCVE-2023-48701Fix available7.5 High
- statamic cms, statamic +1 moreRemote code execution via form uploads in statamic/cmsCVE-2023-48217Fix available8.8 High
- statamic cms, statamic +1 moreStatamic CMS remote code execution via front-end form uploadsCVE-2023-47129Public exploitFix available8.4 High
- flusity cms, flusity +1 moreflusity CMS upload.php handleFileUpload unrestricted uploadCVE-2023-58124.7 Medium
- flusity cms, flusity +1 moreflusity CMS posts.php loadPostAddForm cross site scriptingCVE-2023-58112.4 Low
- flusity cms, flusity +1 moreflusity CMS posts.php loadPostAddForm cross site scriptingCVE-2023-58102.4 Low
- flusity cms, flusity +1 moreflusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scriptingCVE-2023-57933.5 Low
- foru cmsForU CMS cms_admin.php denial of serviceCVE-2023-52592.7 Low
- foru cmsForU CMS index.php code injectionCVE-2023-52214.7 Medium
- pluck cms, pluck-cms pluck +1 morePluck CMS Installation install.php cross site scriptingCVE-2023-50132.6 Low
- craftcms cms, craft cms +1 moreCraft CMS Remote Code Execution vulnerabilityCVE-2023-41892Public exploitFix availableEPSS 94.2%10.0 Critical
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS file accessCVE-2023-47433.1 Low
- craftcms cms, craft cms +1 moreCraft CMS vulnerable to Remote Code Execution via validatePath bypassCVE-2023-40035Fix available7.2 High
- boom cms, uxblondon boom cms +1 moreBoom CMS assets-manager add cross site scriptingCVE-2023-37903.5 Low
- paulprinting cms, paulprinting project paulprinting +1 morePaulPrinting CMS Search delivery cross site scriptingCVE-2023-37893.5 Low
- paulprinting cms, paulprinting project paulprinting +1 morePaulPrinting CMS cross site scriptingCVE-2023-37853.5 Low
- statamic, statamic cms +1 moreStatamic's Antlers sanitizer cannot effectively sanitize malicious SVGCVE-2023-36828Fix available5.5 Medium
- Show moreLoading…