minicms vulnerabilities
CVEs whose affected-version data names the minicms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2025-15458High· 7.3A vulnerability was determined in bg5sbk MiniCMS up to 1.8
A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.php of the component Article Handler. Executing a manipulation can lead to improper authentication. It is possib…
CVE-2025-15457High· 7.3A vulnerability was found in bg5sbk MiniCMS up to 1.8
A vulnerability was found in bg5sbk MiniCMS up to 1.8. The impacted element is an unknown function of the file /minicms/mc-admin/post.php of the component Trash File Restore Handler. Performing a manipulation results in improper authenti…
CVE-2025-15456High· 7.3A vulnerability has been found in bg5sbk MiniCMS up to 1.8
A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-admin/page-edit.php of the component Publish Page Handler. Such manipulation leads to improper authentication. The at…
CVE-2025-15455Medium· 6.5A flaw has been found in bg5sbk MiniCMS up to 1.8
A flaw has been found in bg5sbk MiniCMS up to 1.8. Impacted is the function delete_page of the file /minicms/mc-admin/page.php of the component File Recovery Request Handler. This manipulation causes improper authentication. The attack i…
CVE-2021-41663Medium· 6.1A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11
A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page.