Vulnerabilities in Ajax30

6 results

CVE-2026-35164HIGHBrave CMS Sffected by Unrestricted File Upload via CKEditor EndpointEPSS 0.7%CVE-2026-35047CRITICALBrave CMS has Unrestricted File Upload in BraveCMS via CKEditor EndpointEPSS 0.6%CVE-2026-35182HIGHMissing Authorization Privilege EscalationEPSS 0.3%CVE-2026-41576HIGHAjax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade TemplateEPSS 0.3%CVE-2026-41524HIGHAjax30/BraveCMS-2.0: Stored XSS in Page / Article ContentEPSS 0.2%CVE-2026-35183HIGHBrave CMS has an Insecure Direct Object Reference in Article Image DeletionEPSS 0.2%