Browse CVEs

MEDIUM 5.4 CVE-2021-29460 Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags… Kirby 3.5.4+ Fix from $1,6002021-04-27 CRITICAL 9.1 CVE-2020-26255 Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with full access to the Kirby Pan… Kirby 2.5.14 / 3.4.5+ Fix from $2,3002020-12-08 MEDIUM 5.9 CVE-2020-26253 Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulnerability in which the admin p… Kirby 2.5.14 / 3.3.6+ Fix from $1,6002020-12-08 MEDIUM 5.4 CVE-2018-16624 panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page. Kirby No fix yet Fix from $1,6002019-05-13 MEDIUM 6.1 CVE-2018-16627 panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature. Kirby No fix yet Fix from $1,6002018-12-20 MEDIUM 5.4 CVE-2018-16628 panel/login in Kirby v2.5.12 allows XSS via a blog name. Kirby No fix yet Fix from $1,6002018-12-04 MEDIUM 5.4 CVE-2017-16807 A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially… Panel 2.3.3 / 2.4.2+ Fix from $1,6002017-11-13