Media
CVE-2026-32870
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 51
Restablecer filtros
Media
CVE-2026-21896
Kirby is missing permission checks in the content changes API
Media
CVE-2025-65012
Kirby CMS has cross-site scripting (XSS) in the changes dialog
Baja
CVE-2025-30207
Kirby vulnerable to path traversal in the router for PHP's built-in server
Media
CVE-2025-31493
Kirby vulnerable to path traversal of collection names during file system lookup
Alta
CVE-2024-41964
Kirby has insufficient permission checks in the language settings
Media
CVE-2024-27087
Kirby vulnerable to Cross-site scripting (XSS) in the link field "Custom" type
Media
CVE-2024-26481
Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field
Media
CVE-2024-26483
Kirby vulnerable to unrestricted file upload of user avatar images
Alta
CVE-2023-38488
Field injection in the KirbyData text storage handler
Alta
CVE-2023-38489
Insufficient Session Expiration after a password change
Media
CVE-2023-38490
XML External Entity (XXE) vulnerability in the XML data handler
Media
CVE-2023-38491
Cross-site scripting (XSS) from MIME type auto-detection of uploaded files
Media
CVE-2023-38492
Denial of service from unlimited password lengths
Media
CVE-2022-39315
Kirby CMS vulnerable to user enumeration in the brute force protection
Media
CVE-2022-39314
Kirby CMS vulnerable to user enumeration in the code-based login and password reset forms
Alta
ghsa-rv3r-vqjj-8c76
Cross-site scripting from content entered in the tags and multiselect fields
Media
CVE-2022-36037
Cross-site scripting from dynamic options in the multiselect field
Media
CVE-2018-14520
Kirby CMS 2.5.12 Cross-site Scripting
Media
CVE-2018-14519
Kirby CMS 2.5.12 Cross-site Request Forgery
Media
CVE-2017-16807
Kirby XSS Vulnerability
Media
CVE-2021-41258
Cross-site scripting (XSS) from image block content in the site frontend
Media
CVE-2021-41252
Cross-site scripting (XSS) from writer field content in the site frontend
Alta
CVE-2021-32735
Cross-site scripting (XSS) from field and configuration text displayed in the Panel
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.