pagekit/pagekit

Composer · Package

13 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role componentCVE-2025-67165 · GHSA-W3J8-9P3J-3WJX	pagekit/pagekit	Composer	Critical	No fix reported	2025-12-18
Pagekit CMS is vulnerable to OS Command Injection via Storage componentCVE-2025-67164 · GHSA-M4F2-XPFQ-H97V	pagekit/pagekit	Composer	Critical	No fix reported	2025-12-18
Pagekit Cross-site Scripting vulnerabilityCVE-2024-45967 · GHSA-XW32-6422-FRQM	pagekit/pagekit	Composer	Medium	No fix reported	2024-10-01
Pagekit Weak Password Recovery Mechanism for Forgotten PasswordCVE-2017-5594 · GHSA-RP89-32RP-QPQ2	pagekit/pagekit	Composer	High	Fix reported	2024-04-25
Pagekit open redirect vulnerabilityCVE-2018-14381 · GHSA-V47J-RW9H-6M47	pagekit/pagekit	Composer	Medium	Fix reported	2024-04-25
Pagekit Stored Cross-site ScriptingCVE-2018-11564 · GHSA-3RWJ-V7JP-W542	pagekit/pagekit	Composer	Medium	No fix reported	2024-04-25
Pagekit User enumerationCVE-2019-16669 · GHSA-JH2J-7248-9P3C	pagekit/pagekit	Composer	Medium	No fix reported	2024-04-25
SQL injection in pagekit/pagekitCVE-2021-44135 · GHSA-45HC-R4FJ-QJ89	pagekit/pagekit	Composer	Critical	No fix reported	2024-02-20
Command injection in pagekitCVE-2023-41005 · GHSA-J6MP-HX4G-P3GM	pagekit/pagekit	Composer	High	No fix reported	2024-02-16
Pagekit File Upload vulnerabilityCVE-2019-19013 · GHSA-692X-89XV-64JX	pagekit/pagekit	Composer	High	No fix reported	2024-02-16
Pagekit vulnerable to Unrestricted Upload of File with Dangerous TypeCVE-2022-38916 · GHSA-4V5M-VWVP-P7W8	pagekit/pagekit	Composer	Critical	No fix reported	2023-11-08
Pagekit CMS cross-site scripting in Markdown text box where articles are editedCVE-2022-36573 · GHSA-Q6H8-QJJC-J8CG	pagekit/pagekit	Composer	Medium	No fix reported	2023-11-08
Cross-site scripting in PageKitCVE-2021-32245 · GHSA-MRWR-2945-FR22	pagekit/pagekit	Composer	Medium	No fix reported	2023-11-08