Craft Cms
3 CVEs affecting Craft Cms. Latest disclosed: 2026-07-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-35939 | Medium | 5.3 | 2025-05-07 | Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independe… |
CVE-2026-14794 | Medium | 4.3 | 2026-07-06 | A flaw has been found in Craft CMS up to 4.18.0.1. Affected by this vulnerability is the function actionGetNewUsersData of the file src/controllers/ChartsContr… |
CVE-2026-14793 | Medium | 4.3 | 2026-07-06 | A vulnerability was detected in Craft CMS up to 4.18.0.1. Affected is the function actionReorderSets of the file src/controllers/GlobalsController.php of the c… |