PbootCMS vulnerabilities
We track 3 vulnerabilities in PbootCMS products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 12, 2026.
Latest PbootCMS vulnerabilities
- 7.3 High severity
PbootCMS: Weak Password Recovery Mechanism for Forgotten Password
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/che
- 7.3 High severity
PbootCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in PbootCMS up to 3.2.12. The impacted element is the function checkUsername of the file apps/home/controller/MemberController.php of the component Member Login. The manipulation of the argument Username leads to sql injection. T
- 9.8 Critical severity
PbootCMS: Improper Control of Generation of Code
A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to code injection. It is possible to initiate t