Pagekit vulnerabilities
We track 3 vulnerabilities in Pagekit products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 26, 2026.
Latest Pagekit vulnerabilities
- 8.8 High severity
pagekit: Missing Authorization
Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privileges by assigning arbitrary custom roles to themselves due to missing authorization checks in UserApiCon
- 9.9 Critical severity
Pagekit: Improper Neutralization of Special Elements used in an OS Command
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file.
- 7.8 High severity
Pagekit: Improper Control of Generation of Code
An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php