Skip to content
OpenAdvisories

Package · Packagist

pagekit/pagekit

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2018-11564 Public exploit

    Pagekit Stored Cross-site Scripting

    Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will …

    pagekit/pagekit Packagist