Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

Piranha

8 known vulnerabilities (1 high, 7 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8 · 1 high, 7 medium
Registry
NuGet

Advisories 8

  • CVE-2025-67291Medium 6.1

    A stored cross-site scripting (XSS) vulnerability in the Media module of Piranha CMS v12.1 allows attackers to execute arbitrary web…

    Affected: through 12.0.0.

  • CVE-2025-67290Medium 6.1

    A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha CMS v12.1 allows attackers to execute arbitrary…

    Affected: through 12.0.0.

  • CVE-2025-61413Medium 6.1

    A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute…

    Affected: through 12.0.0.

  • CVE-2025-57692Medium 6.8

    PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, enabling execution…

    Affected: through 12.0.

  • CVE-2024-55342Medium 4.7

    A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media.

    Affected: through 11.1.0.

  • CVE-2024-55341Medium 4.7

    A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web…

    Affected: through 11.1.0.

  • Piranha CMS - Site-wide Cross-Site Request Forgery (CSRF)

    Affected: from 4.0.0-alpha1, fixed in 10.0-alpha1.

  • CVE-2021-25977Medium 5.4

    Piranha CMS - Stored XSS in Page Title

    Affected: from 7.0.0, fixed in 9.2.0.