Skip to content
OpenAdvisories

Vendor

PiranhaCMS

3 known vulnerabilities.

Products

Piranha 2 Piranha CMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-111665

    Piranha CMS through 12.2 Missing Authorization in Manager Language API

    Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController that allows any authenticated manager user to list, create, edit and delete site languages without the granular Language, LanguageAdd, Languag…

    PiranhaCMS Piranha CMS
  • Medium 5.4
    CVE-2021-25977

    Piranha CMS - Stored XSS in Page Title

    In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution.

    PiranhaCMS Piranha Piranha NuGet