Search for packages
| purl | pkg:composer/pagekit/pagekit@1.0.14 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4b6k-tr9h-z7b2
Aliases: CVE-2025-67165 GHSA-w3j8-9p3j-3wjx |
An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges. | There are no reported fixed by versions. |
|
VCID-86f9-mdmh-jbbj
Aliases: CVE-2021-44135 GHSA-45hc-r4fj-qj89 |
SQL injection in pagekit/pagekit | There are no reported fixed by versions. |
|
VCID-mnta-3rft-aqfd
Aliases: CVE-2025-67164 GHSA-m4f2-xpfq-h97v |
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file. | There are no reported fixed by versions. |
|
VCID-y8vq-atne-2ydw
Aliases: CVE-2024-45967 GHSA-xw32-6422-frqm |
Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-kyhu-u4v4-6kfq |
CVE-2018-14381
GHSA-v47j-rw9h-6m47 |
|
| VCID-tt3d-1ty4-sbaj |
CVE-2018-11564
GHSA-3rwj-v7jp-w542 |