Executive brief
Pagekit CMS is a content management system used to build and manage websites. An unauthenticated attacker can exploit a SQL injection vulnerability in the login endpoint to bypass authentication and gain unauthorized access to the CMS. This could allow an attacker to take over the website, modify content, or steal sensitive data stored in the database.
Technical details
The vulnerability exists in the user authentication endpoint (POST /user/authenticate) where the credentials array parameter is not properly sanitized before being used in SQL queries. An unauthenticated attacker can inject malicious SQL code through the credentials submission to manipulate database queries. Successful exploitation allows authentication bypass and database access without valid credentials.
Affected products
- Pagekit Pagekit CMS <= 1.0.18
Timeline
- 2026-09-21: disclosed