statamic Summary

Latest vulnerabilities published by statamic

JSON RSS CSV 🔔 Create Alert Trigger

30 October 2025

Stored XSS Vulnerability in Statamic Content Management System by Statamic
CVE-2025-64112
StatamicCms8HIGH

10 October 2025

Query String Vulnerability in Alt Redirect Addon for Statamic
CVE-2025-60868
StatamicAlt Redirect6.5MEDIUM

8 August 2025

Cross-Site Scripting Vulnerability in Statamic Core by Statamic
CVE-2020-9322
StatamicStatamic Core8.8HIGH

19 November 2024

Path Traversal Vulnerability in Statamic CMS by Statamic
CVE-2024-52600
StatamicStatamic CMS

30 May 2024

Plain text password storage vulnerability affects Statamic users
CVE-2024-36119
StatamicCms1.8LOW

1 February 2024

Statamic account takeover via XSS and password reset link
CVE-2024-24570
StatamicCms8.2HIGH

21 November 2023

Statamic CMS vulnerable to Cross-site Scripting via uploaded assets
CVE-2023-48701
statamiccms6.1MEDIUM

14 November 2023

Remote code execution via form uploads in statamic/cms
CVE-2023-48217
StatamicCms8.8HIGH

10 November 2023

Statamic CMS remote code execution via front-end form uploads
CVE-2023-47129
StatamicCms👾🟡8.4HIGH

5 July 2023

Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG
CVE-2023-36828
StatamicCms5.5MEDIUM

25 March 2022

Discoverability of user password hash in Statamic CMS
CVE-2022-24784
StatamicCms3.7LOW

10 February 2022

Code Execution Vulnerability in Statamic by Statamic
CVE-2021-45364
StatamicStatamic9.8CRITICAL

19 December 2018

Cross-Site Scripting Vulnerability in Statamic CMS by Statamic
CVE-2018-19598
StatamicStatamic4.8MEDIUM

24 July 2017

Access Control Vulnerability in Statamic Framework by Statamic
CVE-2017-11422
StatamicStatamic8.8HIGH