statamic Cms Vulnerabilities

Statamic Cms vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

30 October 2025

Stored XSS Vulnerability in Statamic Content Management System by Statamic
CVE-2025-64112
StatamicCms8HIGH

30 May 2024

Plain text password storage vulnerability affects Statamic users
CVE-2024-36119
StatamicCms1.8LOW

1 February 2024

Statamic account takeover via XSS and password reset link
CVE-2024-24570
StatamicCms8.2HIGH

21 November 2023

Statamic CMS vulnerable to Cross-site Scripting via uploaded assets
CVE-2023-48701
statamiccms6.1MEDIUM

14 November 2023

Remote code execution via form uploads in statamic/cms
CVE-2023-48217
StatamicCms8.8HIGH

10 November 2023

Statamic CMS remote code execution via front-end form uploads
CVE-2023-47129
StatamicCms👾🟡8.4HIGH

5 July 2023

Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG
CVE-2023-36828
StatamicCms5.5MEDIUM

25 March 2022

Discoverability of user password hash in Statamic CMS
CVE-2022-24784
StatamicCms3.7LOW