Craft vulnerabilities
We track 1 vulnerability in Craft products. None are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on May 7, 2025.
1vulnerabilities
0critical
0high
1exploited
5.3average CVSS score
Latest Craft vulnerabilities
- 5.3 Medium severity
Craft CMS External Control of Assumed-Immutable Web Parameter Exploited
Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and gene