Login Request a demo
MI
Product
Minicms
by 1234n · last CVE Jan 5, 2026
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 6High 5Medium 22Low 2
Severity
All severities35Critical6High5Medium22Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Minicms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-9092
8.8
3%
Mar 27
There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password
Affected: 1.10
CVE-2022-33121
8.1
0%
Jun 24
A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link
Affected: 1.11
CVE-2025-15456
7.5
0%
Jan 5
bg5sbk MiniCMS Publish page-edit.php improper authentication
Affected: through 1.8
CVE-2020-36051
7.5
2%
Jan 5
Directory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to read arbitrary files via the state parameter
Affected: 1.10
CVE-2018-18891
7.5
1%
Nov 1
MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the authentication check occurs too late
Affected: 1.10
Showing 5