CM
Product
CMS
by Craft · last CVE Jul 6, 2026
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add CMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-35939
In wildKEV
5.3
1%
May 7
Craft CMS stores user-provided content in session files
Affected: before 5.7.5; before 4.15.3
Showing 1