Alchemy-Cms Alchemy Cms
2 CVEs affecting Alchemy-Cms Alchemy Cms. Latest disclosed: 2026-01-19. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-23885 | Medium | 6.4 | 2026-01-19 | Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Ruby `eval()`… |
CVE-2018-18307 | Medium | 6.1 | 2018-10-16 | A Stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS via the /admin/pictures image field. NOTE: the vendor's position is that this is… |