craftcms/cms vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2023-30177Mediumcraftcms/cms: Cross Site Scripting in CraftCMSCVE-2023-23927Mediumcraftcms/cms: Craft CMS Stored Cross-site Scripting Injection VulnerabilityCVE-2022-37783Highcraftcms/cms: Craft CMS discloses password hashesCVE-2022-37246Mediumcraftcms/cms: Craft CMS Cross-site Scripting vulnerabilityCVE-2022-37250Mediumcraftcms/cms: Craft CMS Stored Cross-site Scripting in User Addresses TitleCVE-2022-37248Mediumcraftcms/cms: Craft CMS Cross site Scripting vulnerabilityCVE-2022-37251Mediumcraftcms/cms: Craft CMS vulnerable to Cross-site Scripting via entry revisions and draftsCVE-2022-37247Mediumcraftcms/cms: Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields pageCVE-2020-19626Mediumcraftcms/cms: Craft CMS Cross-site Scripting VulnerabilityCVE-2019-15929Criticalcraftcms/cms: Craft CMS possibility of brute force attemptsCVE-2019-17496Mediumcraftcms/cms: Craft CMS XSS VulnerabilityCVE-2019-12823Mediumcraftcms/cms: Craft CMS XSS VulnerabilityCVE-2017-8052Mediumcraftcms/cms: Craft CMS XSS VulnerabilityCVE-2017-8384Mediumcraftcms/cms: Craft CMS XSS VulnerabilityCVE-2017-8385Mediumcraftcms/cms: Craft CMS subject to URL forgeryCVE-2017-9516Mediumcraftcms/cms: Craft CMS XSS VulnerabilityCVE-2018-20418Mediumcraftcms/cms: Craft CMS Cross-site Scripting (XSS) VulnerabilityCVE-2018-20465Highcraftcms/cms: Craft CMS Vulnerable to Server-Side Template InjectionCVE-2017-8383Mediumcraftcms/cms: Craft CMS Unauthorized ViewCVE-2018-3814Highcraftcms/cms: Craft CMS PHP Code Injection VulnerabilityCVE-2022-29933Highcraftcms/cms: Improper account password reset in Craft CMSGHSA-WF98-VXV9-JQFVLowcraftcms/cms: XSS Injection VulnerabilityCVE-2022-28378Mediumcraftcms/cms: Cross-site Scripting in craftcms/cmsCVE-2021-32470Mediumcraftcms/cms: Craft CMS Cross-site Scripting VulnerabilityCVE-2021-41824Highcraftcms/cms: CSV Injection Vulnerability

Stop the waste.
Protect your environment with Kodem.