Dotnetfoundation Piranha Cms
8 CVEs affecting Dotnetfoundation Piranha Cms. Latest disclosed: 2025-12-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25976 | High | 8.1 | 2021-11-16 | In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing various actions supported by the management s… |
CVE-2025-57692 | Medium | 6.8 | 2025-09-26 | PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution of arbitrary JavaScri… |
CVE-2025-67291 | Medium | 6.1 | 2025-12-22 | A stored cross-site scripting (XSS) vulnerability in the Media module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via inject… |
CVE-2025-67290 | Medium | 6.1 | 2025-12-22 | A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML vi… |
CVE-2025-61413 | Medium | 6.1 | 2025-10-23 | A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTM… |
CVE-2021-25977 | Medium | 5.4 | 2021-10-25 | In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted pag… |
CVE-2024-55341 | Medium | 4.7 | 2024-12-20 | A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by… |
CVE-2024-55342 | Medium | 4.7 | 2024-12-20 | A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain mali… |