Skip to content
OpenAdvisories

Package · Packagist

pagekit/pagekit

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-67165

    Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component

    An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.

    pagekit/pagekit Packagist
  • Critical 9.9
    CVE-2025-67164

    Pagekit CMS is vulnerable to OS Command Injection via Storage component

    An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file.

    pagekit/pagekit Packagist
  • Critical 9.8
    CVE-2022-38916 EPSS 18%

    Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type

    A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

    pagekit/pagekit Packagist
  • Critical 9.8
    CVE-2021-44135

    SQL injection in pagekit/pagekit

    pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing.

    pagekit/pagekit Packagist