Content management system

This hub aggregates every CVE we track for Content management system, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Content management system.

• CVE-2026-10265itsourcecode Content Management System edit_topic.php sql injection6.3Jun 1, 2026
• CVE-2026-10258itsourcecode Content Management System add_sub_topic.php sql injection6.3Jun 1, 2026
• CVE-2026-10257itsourcecode Content Management System update_ss_img.php sql injection6.3Jun 1, 2026
• CVE-2026-10256itsourcecode Content Management System save_comment.php sql injection6.3Jun 1, 2026
• CVE-2026-10242itsourcecode Content Management System instructions.php sql injection6.3Jun 1, 2026
• CVE-2026-5333DefaultFuction Content-Management-System tools.php command injection7.3Apr 2, 2026
• CVE-2025-7714Time Based SQLi in Global Medya's PHP CMS7.5Jan 29, 2026
• CVE-2025-7713Reflected XSS in Global Medya's PHP CMS7.5Jan 29, 2026
• CVE-2026-0567code-projects Content Management System pages.php sql injection7.3Jan 2, 2026
• CVE-2026-0566code-projects Content Management System edit_posts.php unrestricted upload4.7Jan 2, 2026
• CVE-2026-0565code-projects Content Management System delete.php sql injection7.3Jan 2, 2026
• CVE-2026-0546code-projects Content Management System search.php sql injection7.3Jan 2, 2026
• CVE-2025-15197code-projects/anirbandutta9 Content Management System/News-Buzz editposts.php unrestricted upload4.7Dec 29, 2025
• CVE-2025-14731CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine6.3Dec 15, 2025
• CVE-2025-14730CTCMS Content Management System Backend System Configuration Ct_Config.php code injection4.7Dec 15, 2025