Vulnerabilities in Craft
3 resultsCVE-2025-35939MEDIUMCraft CMS stores user-provided content in session filesEPSS 1.4%KEVCVE-2026-14793MEDIUMCraft CMS reorder-sets Endpoint GlobalsController.php actionReorderSets authorizationEPSS 0.4%CVE-2026-14794MEDIUMCraft CMS Charts Endpoint ChartsController.php actionGetNewUsersData improper authorizationEPSS 0.4%