Skip to content
OpenAdvisories

Package · Packagist

statamic/cms

44 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-27593

    Statamic is vulnerable to account takeover via password reset link injection

    Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 6.3.3 and 5.73.10, an attacker may leverage a vulnerability in the password reset feature to capture a user's token and reset the password on their behalf. The attacker …

    statamic cms statamic/cms Packagist