Skip to content
OpenAdvisories

Vendor

CrafterCMS

5 known vulnerabilities.

Products

CrafterCMS 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-6384 Public exploit

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restr…

    CrafterCMS CrafterCMS org.craftercms:crafter-studio Maven
  • High 7.4
    CVE-2023-4136

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafter Engine

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrafterCMS Engine on Windows, MacOS, Linux, x86, ARM, 64 bit allows Reflected XSS.This issue affects CrafterCMS: from 4.0.0 through 4.0.2, from 3.1.0 through…

    CrafterCMS CrafterCMS org.craftercms:crafter-engine Maven