Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/pagekit/pagekit@1.0.14
purl pkg:composer/pagekit/pagekit@1.0.14
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-4b6k-tr9h-z7b2
Aliases:
CVE-2025-67165
GHSA-w3j8-9p3j-3wjx
An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges. There are no reported fixed by versions.
VCID-86f9-mdmh-jbbj
Aliases:
CVE-2021-44135
GHSA-45hc-r4fj-qj89
SQL injection in pagekit/pagekit There are no reported fixed by versions.
VCID-mnta-3rft-aqfd
Aliases:
CVE-2025-67164
GHSA-m4f2-xpfq-h97v
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file. There are no reported fixed by versions.
VCID-y8vq-atne-2ydw
Aliases:
CVE-2024-45967
GHSA-xw32-6422-frqm
Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget. There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-kyhu-u4v4-6kfq CVE-2018-14381
GHSA-v47j-rw9h-6m47
VCID-tt3d-1ty4-sbaj CVE-2018-11564
GHSA-3rwj-v7jp-w542