Metinfo vulnerabilities

2 known vulnerabilities in Metinfo from Metinfo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  MetInfo CMS: Improper Control of Generation of Code

  CVE-2026-29014Apr 1, 2026MetInfo CMSEPSS 39.5%

  MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted requests with malicious PHP code. Attackers can exploit insufficient input neutralizati

• 7.5 High severity

  Metinfo: Improper Restriction of XML External Entity Reference

  CVE-2025-63551Nov 6, 2025Metinfo

  A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1. This flaw stems from a defect in the XML parsing logic, which allows an attacker to const