Executive brief
Command injection in pagekit
Affected products
- Packagist pagekit/pagekit
Junglewise Threat Intelligence
CVE-2023-41005: Command injection in pagekit
CVE-2023-41005 · Severity: low · CVSS 3.1 · Published 2023-08-29
Technologies: pagekit/pagekit (Packagist). Vendors: Packagist.
Related threats
- Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component
- Pagekit CMS is vulnerable to OS Command Injection via Storage component
- Pagekit Cross-site Scripting vulnerability
- Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
- Pagekit CMS cross-site scripting in Markdown text box where articles are edited