Craft CMS
4 CVEs in CISA KEV
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2025-32432 |
Craft CMS | — | 0.9979 | 2026-03-20 | 2026-04-03 | Craft CMS contains a code injection vulnerability that allows a remote attacker | |
CVE-2024-56145 |
Craft CMS | — | 0.9740 | 2025-06-02 | 2025-06-23 | Craft CMS contains a code injection vulnerability. Users with affected versions | |
CVE-2025-23209 |
Craft CMS | — | 0.2164 | 2025-02-20 | 2025-03-13 | Craft CMS contains a code injection vulnerability caused by improper validation | |
CVE-2025-35939 |
Craft CMS | — | 0.0135 | 2025-06-02 | 2025-06-23 | Craft CMS contains an external control of assumed-immutable web parameter vulner |