Skip to content
OpenAdvisories

Package · Packagist

pagekit/pagekit

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.7
    CVE-2024-45967

    Pagekit Cross-site Scripting vulnerability

    Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.

    pagekit/pagekit Packagist
  • Medium 6.1
    CVE-2022-36573

    Pagekit CMS cross-site scripting in Markdown text box where articles are edited

    A cross-site scripting (XSS) vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Markdown text box under /blog/post/edit.

    pagekit/pagekit Packagist
  • Medium 5.4
    CVE-2021-32245

    Cross-site scripting in PageKit

    In PageKit v1.0.18, a user can upload SVG files in the file upload portion of the CMS. These SVG files can contain malicious scripts. This file will be uploaded to the system and it will not be stripped or filtered. The user can create a link on the website p…

    pagekit/pagekit Packagist
  • Medium 5.3
    CVE-2019-16669

    Pagekit User enumeration

    The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts.

    pagekit/pagekit Packagist
  • Medium 6.1
    CVE-2018-14381

    Pagekit open redirect vulnerability

    Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability.

    pagekit/pagekit Packagist
  • Medium 4.8
    CVE-2018-11564 Public exploit

    Pagekit Stored Cross-site Scripting

    Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will …

    pagekit/pagekit Packagist