craftcms/cms vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-12823Mediumcraftcms/cms: Craft CMS XSS Vulnerability CVE-2017-8052Mediumcraftcms/cms: Craft CMS XSS Vulnerability CVE-2017-8384Mediumcraftcms/cms: Craft CMS XSS Vulnerability CVE-2017-8385Mediumcraftcms/cms: Craft CMS subject to URL forgery CVE-2017-9516Mediumcraftcms/cms: Craft CMS XSS Vulnerability CVE-2018-20418Mediumcraftcms/cms: Craft CMS Cross-site Scripting (XSS) Vulnerability CVE-2018-20465Highcraftcms/cms: Craft CMS Vulnerable to Server-Side Template Injection CVE-2017-8383Mediumcraftcms/cms: Craft CMS Unauthorized View CVE-2018-3814Highcraftcms/cms: Craft CMS PHP Code Injection Vulnerability CVE-2022-29933Highcraftcms/cms: Improper account password reset in Craft CMS GHSA-WF98-VXV9-JQFVLowcraftcms/cms: XSS Injection Vulnerability CVE-2022-28378Mediumcraftcms/cms: Cross-site Scripting in craftcms/cms CVE-2021-32470Mediumcraftcms/cms: Craft CMS Cross-site Scripting Vulnerability CVE-2021-41824Highcraftcms/cms: CSV Injection Vulnerability CVE-2021-27903Criticalcraftcms/cms: Craft CMS Remote Code Injection CVE-2021-27902Mediumcraftcms/cms: Craft CMS Cross-site Scripting Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo