PbootCMS vulnerabilities

43 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Latest PbootCMS vulnerabilities

CVE-2026-92383 — PbootCMS User Management UserController.php mod cross-site request forgery (CVSS 4.3)
CVE-2026-92381 — PbootCMS Template Rendering ContentController.php decode_string cross site scripting (CVSS 3.5)
CVE-2026-12066 — PbootCMS Password MemberController.php retrieve password recovery (CVSS 7.3)
CVE-2026-4514 — PbootCMS Backend UserController.php access control (CVSS 6.3)
CVE-2026-4510 — PbootCMS Parameter MemberController.php alert_location cross site scripting (CVSS 4.3)
CVE-2026-4509 — PbootCMS File Upload file.php incomplete blacklist (CVSS 6.3)
CVE-2026-4508 — PbootCMS Member Login MemberController.php checkUsername sql injection (CVSS 7.3)
CVE-2025-15154 — PbootCMS Header handle.php get_user_ip less trusted source (CVSS 5.3)
CVE-2025-15153 — PbootCMS SQLite Database pbootcms.db file access (CVSS 5.9)
CVE-2025-46109 — (CVSS 8.8)
CVE-2025-3787 — PbootCMS Image server-side request forgery (CVSS 6.5)
CVE-2025-29389 — (CVSS 6.1)
CVE-2020-19248 — (CVSS 5.1)
CVE-2024-12793 — PbootCMS IndexController.php path traversal (CVSS 4.3)
CVE-2024-12789 — PbootCMS IndexController.php code injection (CVSS 9.8)
CVE-2024-42930 — (CVSS 6.1)
CVE-2024-1018 — PbootCMS cross site scripting (CVSS 6.1)
CVE-2023-50082 — (CVSS 7.5)
CVE-2023-39834 — (CVSS 9.8)
CVE-2021-37497 — (CVSS 9.8)
CVE-2022-32417 — (CVSS 9.8)
CVE-2020-20971 — (CVSS 8.8)
CVE-2020-18456 — (CVSS 4.8)
CVE-2020-22535 — (CVSS 6.5)
CVE-2020-23580 — (CVSS 9.8)