What’s Vulnerable › Products

Ajax30 BraveCMS-2.0 vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Ajax30 BraveCMS-2.0 version is affected

Latest Ajax30 BraveCMS-2.0 vulnerabilities

• CVE-2026-41576 — Ajax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade Template (CVSS 7.1)
• CVE-2026-41524 — Ajax30/BraveCMS-2.0: Stored XSS in Page / Article Content (CVSS 8.7)
• CVE-2026-35183 — Brave CMS has an Insecure Direct Object Reference in Article Image Deletion (CVSS 5.4)
• CVE-2026-35182 — Missing Authorization Privilege Escalation (CVSS 8.8)
• CVE-2026-35164 — Brave CMS Sffected by Unrestricted File Upload via CKEditor Endpoint (CVSS 8.8)
• CVE-2026-35047 — Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpoint (CVSS 9.8)