craft_cms vulnerabilities

CVEs whose affected-version data names the craft_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-29113Medium· 4.3

6mo ago

Craft is a content management system (CMS)

Craft is a content management system (CMS). Prior to 4.17.3 and 5.9.7, Craft CMS has a CSRF issue in the preview token endpoint at /actions/preview/create-token. The endpoint accepts an attacker-supplied previewToken. Because the action …

▾ Sunlitcraftcms · craft_cmsEPSS 0.17%via NVD