Skip to content
Noroxi

Pagekit records

13 published records for vendor pagekit.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
15.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2022-38916
    44Plan

    A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

    CriticalCVSS 9.8No exploitEPSS 18%

    pagekit · pagekitSep 20, 2022

  • CVE-2021-44135
    39Monitor

    pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing.

    CriticalCVSS 9.8No exploitEPSS 2%

    pagekit · pagekitApr 1, 2022

  • CVE-2025-67164
    39Monitor

    An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute ar

    CriticalCVSS 9.9No exploitEPSS 1%

    pagekit · pagekitDec 17, 2025

  • CVE-2025-67165
    39Monitor

    An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.

    CriticalCVSS 9.8No exploitEPSS 0%

    pagekit · pagekitDec 17, 2025

  • CVE-2019-19013
    35Monitor

    A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request.

    HighCVSS 8.8No exploitEPSS 1%

    pagekit · pagekitNov 22, 2019

  • CVE-2017-5594
    32Monitor

    An issue was discovered in Pagekit CMS before 1.0.11.

    HighCVSS 7.5Proof of conceptEPSS 7%

    pagekit · pagekitJan 25, 2017

  • CVE-2023-41005
    31Monitor

    An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in U

    HighCVSS 7.8No exploitEPSS 1%

    pagekit · pagekitAug 28, 2023

  • CVE-2018-14381
    24Monitor

    Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability.

    MediumCVSS 6.1No exploitEPSS 1%

    pagekit · pagekitJul 18, 2018

  • CVE-2022-36573
    24Monitor

    A cross-site scripting (XSS) vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or HTML via a crafted pa

    MediumCVSS 6.1No exploitEPSS 1%

    pagekit · pagekitAug 28, 2022

  • CVE-2019-16669
    21Monitor

    The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is e

    MediumCVSS 5.3No exploitEPSS 1%

    pagekit · pagekitSep 21, 2019

  • CVE-2021-32245
    21Monitor

    In PageKit v1.0.18, a user can upload SVG files in the file upload portion of the CMS.

    MediumCVSS 5.4No exploitEPSS 1%

    pagekit · pagekitJun 16, 2021

  • CVE-2018-11564
    20Monitor

    Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature.

    MediumCVSS 4.8Proof of conceptEPSS 3%

    pagekit · pagekitJun 1, 2018

  • CVE-2024-45967
    18Monitor

    Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.

    MediumCVSS 4.7No exploitEPSS 0%

    pagekit · pagekitOct 1, 2024