Ajax30

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Ajax30 records in CISA KEV

No Ajax30 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bravecms 4 records HIGH

Records

6 records

TI-2026-27336 CVE-2026-35182

Missing authorization privilege escalation in Ajax30 BraveCMS-2.0

HIGH 73

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00349 Published 2026-04-06 Fixed in 2.0.6 CWE-862

TI-2026-27318 CVE-2026-35164

Brave CMS Sffected by Unrestricted File Upload via CKEditor Endpoint

HIGH 73

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0072 Published 2026-04-06 Fixed in 2.0.6 CWE-434

TI-2026-30107 CVE-2026-41524

Ajax30/BraveCMS-2.0: Stored XSS in Page / Article Content

HIGH 71

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00261 Published 2026-05-08 Fixed in 6c5660373cf5f0ca9181603280427aca46ef11ea CWE-79

TI-2026-27337 CVE-2026-35183

Brave CMS has an Insecure Direct Object Reference in Article Image Deletion

MEDIUM 64

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00209 Published 2026-04-06 Fixed in 2.0.6 CWE-639

TI-2026-27250 CVE-2026-35047

Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpoint

MEDIUM 49

Brave CMS is an open-source CMS.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00564 Published 2026-04-06 Fixed in 2.0.6 CWE-434

TI-2026-30131 CVE-2026-41576

Ajax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade Template

LOW 31

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2026-05-08 Fixed in 6c5660373cf5f0ca9181603280427aca46ef11ea CWE-79

Open these records in search →