Dotnetfoundation Piranha Cms vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dotnetfoundation Piranha Cms: 3 record(s), with affected versions and fixes.cpe:2.3:a:dotnetfoundation:piranha_cms
CVE-2025-67291
Medium · 6.1
CWE-79 Dec 22, 2025
Cross-site Scripting (XSS) in Dotnetfoundation Piranha Cms
A stored cross-site scripting (XSS) vulnerability in the Media module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name field.
CVE-2025-67290
Medium · 6.1
CWE-79 Dec 22, 2025
Cross-site Scripting (XSS) in Dotnetfoundation Piranha Cms
A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha CMS v12.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Excerpt field.
CVE-2025-61413
Medium · 6.1
CWE-79 Oct 23, 2025
Cross-site Scripting (XSS) in Dotnetfoundation Piranha Cms
A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks.