[ Vendor · 1 CVEs ]
Craft
CVEs affecting Craft published in the last 30 days, plus any Craft CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-35939 | 7 May 2025 | CVSS 5.3 | Craft CMS External Control of Assumed-Immutable Web ParameterCraft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an… | ExploitedFix |