Search for packages
| purl | pkg:composer/pagekit/pagekit@1.0.8 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4b6k-tr9h-z7b2
Aliases: CVE-2025-67165 GHSA-w3j8-9p3j-3wjx |
An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges. | There are no reported fixed by versions. |
|
VCID-86f9-mdmh-jbbj
Aliases: CVE-2021-44135 GHSA-45hc-r4fj-qj89 |
SQL injection in pagekit/pagekit | There are no reported fixed by versions. |
|
VCID-kyhu-u4v4-6kfq
Aliases: CVE-2018-14381 GHSA-v47j-rw9h-6m47 |
Affected by 4 other vulnerabilities. |
|
|
VCID-mnta-3rft-aqfd
Aliases: CVE-2025-67164 GHSA-m4f2-xpfq-h97v |
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file. | There are no reported fixed by versions. |
|
VCID-tt3d-1ty4-sbaj
Aliases: CVE-2018-11564 GHSA-3rwj-v7jp-w542 |
Affected by 4 other vulnerabilities. |
|
|
VCID-ueau-9u7h-xqcj
Aliases: CVE-2017-5594 GHSA-rp89-32rp-qpq2 |
Pagekit Weak Password Recovery Mechanism for Forgotten Password |
Affected by 6 other vulnerabilities. |
|
VCID-y8vq-atne-2ydw
Aliases: CVE-2024-45967 GHSA-xw32-6422-frqm |
Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||