Skip to content
OpenAdvisories

Vendor

doramart

4 known vulnerabilities.

Products

DoraCMS 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-120448

    DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint

    DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint that allows authenticated low-privileged users to rebind their API key to another user's account. Attackers can set the userId field on their own key …

    doramart DoraCMS
  • High 7.3
    CVE-2026-3794

    doramart DoraCMS Email API send improper authentication

    A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1/mail/send of the component Email API. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. Th…

    doramart DoraCMS