Couchcms
5 CVEs across 2 Couchcms products. Browse Couchcms vulnerabilities, severities, and proof-of-concept exploits.
Couchcms products with known CVEs
Couchcms CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-47955 | Medium | 5.4 | 2026-05-16 | CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG fil… |
CVE-2021-47958 | Medium | 4.3 | 2026-05-15 | CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious… |
CVE-2026-29002 | High | 7.2 | 2026-04-10 | CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_leve… |
CVE-2025-67004 | Medium | 6.5 | 2026-01-09 | ** Disputed ** An Information Disclosure vulnerability in CouchCMS 2.4 allow an Admin user to read arbitrary files via traversing directories back after back… |
CVE-2025-15005 | Low | 3.7 | 2025-12-22 | A security flaw has been discovered in CouchCMS up to 2.4. Affected is an unknown function of the file couch/config.example.php of the component reCAPTCHA Hand… |
CVE-2023-41609 | Medium | 6.1 | 2023-09-11 | An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a craft… |
CVE-2018-7662 | Medium | 5.3 | 2018-03-04 | Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. |