AlchemyCMS

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

AlchemyCMS records in CISA KEV

No AlchemyCMS vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Alchemy Cms · all components

TI-2026-19243 CVE-2026-23885 · GHSA-2762-657x-v979

MEDIUM 43

Alchemy is an open source content management system engine written in Ruby on Rails.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00472 Published 2026-01-19 Fixed in 7.4.12, 8.0.3 CWE-95

TI-2018-12927 CVE-2018-18307

LOW 31

A Stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS via the /admin/pictures image field.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01698 Published 2018-10-16 No fix listed CWE-79