CC
Product
Craft Cms
by Craftcms · last CVE Mar 24, 2026
On CISA KEVExploited in the wild
97
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 31Medium 55Low 0
Watch

Add Craft Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-35939
In wildKEV
5.3
1%
May 7
Craft CMS stores user-provided content in session files
Affected: before 4.15.3; 5.0.0 before 5.7.5
Showing 1