Grabaperch Perch
4 CVEs affecting Grabaperch Perch. Latest disclosed: 2026-01-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53889 | High | 7.2 | 2025-12-15 | Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets manageme… |
CVE-2025-66686 | Medium | 6.1 | 2026-01-07 | A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated attacker with administrative privileges can inject maliciou… |
CVE-2023-53890 | Medium | 5.4 | 2025-12-15 | Perch CMS 3.2 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript. Atta… |
CVE-2017-15948 | Medium | 4.8 | 2017-10-28 | Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field… |