Skip to content
OpenAdvisories

Package · NuGet

Piranha

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-67290

    Piranha has stored cross-site scripting (XSS) vulnerability

    A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Excerpt field.

    Piranha NuGet
  • Medium 6.1
    CVE-2025-67291

    Piranha has stored cross-site scripting (XSS) vulnerability

    A stored cross-site scripting (XSS) vulnerability in the Media module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name field.

    Piranha NuGet
  • Medium 6.1
    CVE-2025-61413

    Piranha CMS vulnerable to stored cross-site scripting (XSS)

    A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks.

    Piranha NuGet
  • Medium 6.8
    CVE-2025-57692

    PiranhaCMS stored XSS

    PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScript in another user s browser.

    Piranha NuGet
  • Medium 4.7
    CVE-2024-55341

    Piranha CMS Cross-site Scripting vulnerability

    A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload.

    Piranha NuGet
  • Medium 4.7
    CVE-2024-55342

    Piranha CMS Cross-site Scripting vulnerability

    A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their…

    Piranha NuGet
  • Medium 5.4
    CVE-2021-25977

    Piranha CMS - Stored XSS in Page Title

    In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution.

    PiranhaCMS Piranha Piranha NuGet