Pyrocms

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 6
    Known Exploited: 0
    2
    Critical Level Threats
    1
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-58297

    PyroCMS v3.0.1 Stored Cross-Site Scripting via Admin Redirects

    Last Modified: Mar 05, 2026
    Published: Dec 11, 2025

    CVE-2023-29689

    PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious attacker to send customized commands to the server and execute arbitrary code on the affected system.

    Last Modified: Nov 21, 2024
    Published: Aug 04, 2023

    CVE-2022-37721

    PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting (XSS_ when a low privileged user such as an author, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation.

    Last Modified: Apr 25, 2025
    Published: Nov 25, 2022

    CVE-2022-35118

    PyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.

    Last Modified: Nov 21, 2024
    Published: Aug 01, 2022

    CVE-2020-25262

    PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.

    Last Modified: Nov 21, 2024
    Published: Oct 08, 2020
    Items Per Page
    Pyrocms Vulnerabilities & Security CVEs | CVE-DB