PbootCMS vulnerabilities
CVEs whose affected-version data names the PbootCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-92383Medium· 4.3PoCA security vulnerability has been detected in PbootCMS up to 3.2.24
A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controller/system/UserController.php of the component User Manage…
CVE-2026-92381Low· 3.5PoCA weakness has been identified in PbootCMS up to 3.2.22
A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decode_string of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title…
CVE-2025-15154Medium· 5.3A security vulnerability has been detected in PbootCMS up to 3.2.12
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For …
CVE-2025-15153Low· 3.7A weakness has been identified in PbootCMS up to 3.2.12
A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db of the component SQLite Database. Executing a manipulation can lead to files or directories accessible. It is possible…
CVE-2020-20363Medium· 4.8Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.
Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.