Picocms Pico
1 CVEs affecting Picocms Pico. Latest disclosed: 2026-08-10. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72574 | Medium | 6.1 | 2026-08-10 | A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS asset… |