Skip to content
OpenAdvisories

Vendor

getkirby

47 known vulnerabilities.

Products

kirby 47
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-108924 Public exploit

    getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization

    A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass…

    getkirby kirby
  • Medium 6.8
    CVE-2023-38490 Public exploit

    Kirby XML External Entity (XXE) vulnerability in the XML data handler

    Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 only affects Kirby sites that use the `Xml` data handler (e.g. `Data::decode($string, 'xml')`) or the `Xml::parse()` method in site or plu…

    getkirby kirby getkirby/cms Packagist