Known vulnerabilities in Crafter CMS

Vendor: Crafter Software Corporation
Software: Crafter CMS
Software CPE: cpe:2.3:a:crafter_software_corporation:crafter_cms:*:*:*:*:*:*:*:*
Website: https://craftercms.org/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Crafter CMS Crafter CMS is affected by 7 known vulnerabilities: 1 high, 2 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58517 -
CVE-2021-23264		 High
No
No
 3.1.15 03.12.2021 SB2021120329
#VU58516 - Exposure of sensitive information to an unauthorized actor
CVE-2021-23263		 CWE-200 Medium
No
No
 3.1.15 03.12.2021 SB2021120329
#VU58515 - Improper Control of Dynamically-Managed Code Resources
CVE-2021-23262		 CWE-913 Low
No
No
 3.1.13 03.12.2021 SB2021120328
#VU58514 - Improper Check or Handling of Exceptional Conditions
CVE-2021-23261		 CWE-703 Medium
No
No
 3.1.13 03.12.2021 SB2021120328
#VU58513 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23260		 CWE-79 Low
No
No
 3.1.12 03.12.2021 SB2021120327
#VU58512 - Improper Control of Dynamically-Managed Code Resources
CVE-2021-23259		 CWE-913 Low
No
No
 3.1.12 03.12.2021 SB2021120327
#VU58511 - Improper Control of Dynamically-Managed Code Resources
CVE-2021-23258		 CWE-913 Low
No
No
 3.1.12 03.12.2021 SB2021120327