BoidCMS vulnerabilities
We track 1 vulnerability in BoidCMS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 14, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest BoidCMS vulnerabilities
- 7.2 High severity
BoidCMS: Improper Control of Filename for Include/Require Statement in PHP Program
BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database. Versions prior to 2.1.3 are vulnerable to a critical Local File Inclusion (LFI) attack via the tpl parameter, which can lead to Remote Code E