Product · craftcms

cms

144 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2025-23209 Exploited EPSS 22%

Potential RCE with a compromised security key in craft/cms

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running…

craftcms cms craftcms/cms Packagist

Jan 18, 2025
KEV Feb 20, 2025