Skip to content
OpenAdvisories

Package · Packagist

getkirby/kirby

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-30159

    Kirby vulnerable to path traversal of snippet names in the `snippet()` helper

    Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby sites that use the `snippet()` helper or `$kirby->snippet()` method with a dynamic snippet name (such as a snippet name that…

    getkirby kirby getkirby/kirby Packagist
  • Medium 4.8
    CVE-2018-16630

    Kirby XSS Vulnerability

    Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.

    getkirby/kirby Packagist