Skip to content
OpenAdvisories

Vendor

BoidCMS

2 known vulnerabilities.

Products

BoidCMS 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-39387 Public exploit

    BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameter

    BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database. Versions prior to 2.1.3 are vulnerable to a critical Local File Inclusion (LFI) attack via the tpl parameter, which can lead to Remote Code …

    BoidCMS BoidCMS
  • Medium 5.3
    CVE-2024-53255 Public exploit

    Reflected Cross-site Scripting in /admin?page=media via file Parameter in BoidCMS

    BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the …

    BoidCMS BoidCMS