Skip to content
OpenAdvisories

Vendor

getkirby

47 known vulnerabilities.

Products

kirby 47
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-108924 Public exploit

    getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization

    A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass…

    getkirby kirby
  • Medium 6.8
    CVE-2023-38490 Public exploit

    Kirby XML External Entity (XXE) vulnerability in the XML data handler

    Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the `Xml` data handler (e.g. `Data::decode($string, 'xml')`) or the `Xml::parse()` method in site or plu…

    getkirby kirby getkirby/cms Packagist
  • High 7.6
    CVE-2021-29460 Public exploit

    Cross-site scripting (XSS) from unsanitized uploaded SVG files

    Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags. The direct link to that file can be sent to other users or visitors of the site. If the victim opens that li…

    getkirby kirby getkirby/cms Packagist