Executive brief
Pagekit CMS is vulnerable to OS Command Injection via Storage component
Affected products
- Packagist pagekit/pagekit
Junglewise Threat Intelligence
CVE-2025-67164: Pagekit CMS is vulnerable to OS Command Injection via Storage component
CVE-2025-67164 · Severity: low · CVSS 3.1 · Published 2025-12-17
Technologies: pagekit/pagekit (Packagist). Vendors: Packagist.
Related threats
- Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component
- Pagekit Cross-site Scripting vulnerability
- Command injection in pagekit
- Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
- Pagekit CMS cross-site scripting in Markdown text box where articles are edited