Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist

craftcms/cms

packagist · Craft CMS · Repository · Package

Security Advisories for craftcms/cms in packagist

Moderate
about 1 month ago

Craft CMS Potential Remote Code Execution via Twig SSTI GSA_kwCzR0hTQS1jcmNxLTczOGctcHF2Y84ABLZ-

packagist craftcms/cms
Moderate
about 2 months ago

Craft CMS has a theoretical bypass for CVE-2025-23209 GSA_kwCzR0hTQS0ydmNmLXF4djMtMm1nd84ABK4m

packagist craftcms/cms
Moderate
5 months ago

Craft CMS stores arbitrary content provided by unauthenticated users in session files GSA_kwCzR0hTQS03dnJ4LTk2ODQteHJmMs4ABHoC

packagist craftcms/cms
High
5 months ago

Craft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTI GSA_kwCzR0hTQS03YzU4LWc3ODItOWozOM4ABHel

packagist craftcms/cms
Critical
5 months ago

Craft CMS Allows Remote Code Execution GSA_kwCzR0hTQS1mM2d3LTl3dzktam1jM84ABHLX

packagist craftcms/cms
High
8 months ago

Craft CMS has a potential RCE with a compromised security key GSA_kwCzR0hTQS14Njg0LTk2aGgtODMzeM4ABDot

packagist craftcms/cms
Critical
10 months ago

Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled GSA_kwCzR0hTQS0ycDZwLTlyYzktNjJqOc4ABCjf

packagist craftcms/cms
High
11 months ago

Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI GSA_kwCzR0hTQS1mM2N3LWhnNnItY2hmds4ABBS7

packagist craftcms/cms
High
11 months ago

Craft CMS Arbitrary System File Read GSA_kwCzR0hTQS1jdzZnLXFtanEtNncyd84ABBS6

packagist craftcms/cms
High
11 months ago

Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution GSA_kwCzR0hTQS1qcmg1LXZocjktcWg3cc4ABBS5

packagist craftcms/cms
Moderate
about 1 year ago

Craft CMS vulnerable to stored XSS in breadcrumb list and title fields GSA_kwCzR0hTQS0yOGg0LTc4OGctcmg0Ms4AA_YV

packagist craftcms/cms
Moderate
about 1 year ago

Craft CMS Allows TOTP Token To Stay Valid After Use GSA_kwCzR0hTQS13bXg3LXB3NDktODhqeM4AA-H0

packagist craftcms/cms
Critical
over 1 year ago

Craft CMS SQL injection vulnerability via the GraphQL API endpoint GSA_kwCzR0hTQS1ocTRmLW12M3EtOHdjds4AA9We

packagist craftcms/cms
High
over 1 year ago

Craft CMS Feed-Me GSA_kwCzR0hTQS02cDc4LWY3aDktNjgzOM4AA48K

packagist craftcms/cms
Moderate
over 1 year ago

Craft CMS Privilege Escalation GSA_kwCzR0hTQS1qNWc5LWo3cjQtNnF2eM4AA4L0

packagist craftcms/cms
Critical
about 2 years ago

Craft CMS Remote Code Execution vulnerability GSA_kwCzR0hTQS00dzhyLTN4cnctdjI1Z84AA12q

packagist craftcms/cms
High
about 2 years ago

Craft CMS vulnerable to Remote Code Execution via validatePath bypass GSA_kwCzR0hTQS00NHdyLXJtd3EtM3Bod84AA1aT

packagist craftcms/cms
Moderate
over 2 years ago

Craft CMS vulnerable to HTML injection GSA_kwCzR0hTQS1tM3Y1LWdqajktcmcyNM4AAz9L

packagist craftcms/cms
Moderate
over 2 years ago

Stored cross site scripting in Craft CMS GSA_kwCzR0hTQS03eDk0LWp4NzUtM2doNs4AAzfU

packagist craftcms/cms
Moderate
over 2 years ago

Craft CMS stored XSS in indexedVolumes GSA_kwCzR0hTQS02cWp4LTc4N3YtNnB4cs4AAze0

packagist craftcms/cms
Moderate
over 2 years ago

Craft CMS stored XSS in review volume GSA_kwCzR0hTQS1jam1tLXg5eDktbTJ3Nc4AAzez

packagist craftcms/cms
Moderate
over 2 years ago

Craft CMS XSS in RSS widget feed GSA_kwCzR0hTQS1xcGdtLWdqZ2YtOGMyeM4AAzey

packagist craftcms/cms
Low
over 2 years ago

CraftCMS stored XSS in Quick Post widget error message GSA_kwCzR0hTQS0zd3hnLXc5NmotOGhxOc4AAzex

packagist craftcms/cms
High
over 2 years ago

Craft CMS vulnerable to Remote Code Execution via unrestricted file extension GSA_kwCzR0hTQS12cXhmLXI5cGgtY2M5Y84AAzbH

packagist craftcms/cms
High
over 2 years ago

CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter GSA_kwCzR0hTQS1mang1LXhtN3Etd2h2as4AAzTe

packagist craftcms/cms
Moderate
over 2 years ago

craftcms/cms vulnerable to cross site scripting in RSS feed widget GSA_kwCzR0hTQS1qNG14LTk4aHctNnJ2Ns4AAzGz

packagist craftcms/cms
Moderate
over 2 years ago

Cross Site Scripting in CraftCMS GSA_kwCzR0hTQS13djdqLXJjMnEtOWo2N84AAy9X

packagist craftcms/cms
Moderate
over 2 years ago

Craft CMS Stored Cross-site Scripting Injection Vulnerability GSA_kwCzR0hTQS1xY3JqLTZmZmMtdjdocc4AAx7K

packagist craftcms/cms
High
almost 3 years ago

Craft CMS discloses password hashes GSA_kwCzR0hTQS1oOTcyLXY0NTgtbTg5Ms4AAwJz

packagist craftcms/cms
Moderate
about 3 years ago

Craft CMS Cross-site Scripting vulnerability GSA_kwCzR0hTQS1mNTQ2LXY2NjYtNTU5eM4AAu-Z

packagist craftcms/cms
Moderate
about 3 years ago

Craft CMS Cross site Scripting vulnerability GSA_kwCzR0hTQS13eHZmLTgzOWYtanFtaM4AAu32

packagist craftcms/cms
Moderate
about 3 years ago

Craft CMS Stored Cross-site Scripting in User Addresses Title GSA_kwCzR0hTQS04cjg5LXg5M3gtbWpxMs4AAu33

packagist craftcms/cms
Moderate
about 3 years ago

Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page GSA_kwCzR0hTQS0zY3ZtLTd3cmgtcXJmOc4AAu3C

packagist craftcms/cms
Moderate
about 3 years ago

Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts GSA_kwCzR0hTQS1tdzM3LXd4OHAtZ3A0Nc4AAu4D

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS Cross-site Scripting Vulnerability GSA_kwCzR0hTQS0zM2pqLTkycHgtbTRnN84AAn8C

packagist craftcms/cms
Critical
over 3 years ago

Craft CMS possibility of brute force attempts GSA_kwCzR0hTQS13dnI0LXc2Y3ctNHB4OM4AAige

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS XSS Vulnerability GSA_kwCzR0hTQS1mM3hyLXEyNTgtaDdtOc4AAiXR

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS XSS Vulnerability GSA_kwCzR0hTQS13NXE0LXE3d3AtcXd3Ns4AAhCh

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS XSS Vulnerability GSA_kwCzR0hTQS14djVmLTI5OTctcWhycc4AAbrG

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS subject to URL forgery GSA_kwCzR0hTQS1qMjdnLXI1OHEtNjI0d84AAboA

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS XSS Vulnerability GSA_kwCzR0hTQS05bWN3LW13eHYtZ3J3as4AAboB

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS XSS Vulnerability GSA_kwCzR0hTQS02cHZ3LWhoNDgtang3cM4AAa1F

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS Cross-site Scripting (XSS) Vulnerability GSA_kwCzR0hTQS03MnBmLWN2d3EtdmdxZ84AAT3J

packagist craftcms/cms
High
over 3 years ago

Craft CMS Vulnerable to Server-Side Template Injection GSA_kwCzR0hTQS1qN2Z4LXYzN2otdjN3N84AASzK

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS Unauthorized View GSA_kwCzR0hTQS03cXE2LWZncHcteHc0Nc4AASds

packagist craftcms/cms
High
over 3 years ago

Craft CMS PHP Code Injection Vulnerability GSA_kwCzR0hTQS1yMzQyLXZqYzQtd3Jtas3_CA

packagist craftcms/cms
High
over 3 years ago

Improper account password reset in Craft CMS GSA_kwCzR0hTQS01Y2pyLTc4Y3EtM3dyZ83kIg

packagist craftcms/cms
Low
over 3 years ago

XSS Injection Vulnerability GSA_kwCzR0hTQS13Zjk4LXZ4djktanFmds04kA

packagist craftcms/cms
Moderate
over 3 years ago

Cross-site Scripting in craftcms/cms GSA_kwCzR0hTQS03eGo1LWZ3cXItNTM3OM04Fg

packagist craftcms/cms
Moderate
over 3 years ago

Craft CMS Cross-site Scripting Vulnerability GSA_kwCzR0hTQS1oMnJqLTh3Z2ctbW00M800GA

packagist craftcms/cms
High
almost 4 years ago

CSV Injection Vulnerability GSA_kwCzR0hTQS1oN3ZxLTVxZ3ctand3cc0WlA

packagist craftcms/cms
Critical
over 4 years ago

Craft CMS Remote Code Injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXgyajctNmh4bS04N3Az

packagist craftcms/cms
Moderate
over 4 years ago

Craft CMS Cross-site Scripting Vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNqeGgtNzg5Zi1wN202

packagist craftcms/cms

Filter by Severity

Moderate 31 High 14 Critical 6 Low 2