Vulnerabilities > Getkirby > Kirby > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-07-27 | CVE-2023-38491 | Cross-site Scripting vulnerability in Getkirby Kirby Kirby is a content management system. | 5.4 |
| 2022-10-25 | CVE-2022-39315 | Information Exposure Through an Error Message vulnerability in Getkirby Kirby Kirby is a Content Management System. | 5.3 |
| 2020-12-08 | CVE-2020-26255 | Unrestricted Upload of File with Dangerous Type vulnerability in Getkirby Kirby Kirby is a CMS. | 6.5 |
| 2020-12-08 | CVE-2020-26253 | Origin Validation Error vulnerability in Getkirby Kirby Kirby is a CMS. | 4.3 |
| 2018-12-20 | CVE-2018-16627 | Injection vulnerability in Getkirby Kirby 2.5.12 panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature. | 5.8 |