Read the docs

BoomCMS

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

BoomCMS records in CISA KEV

No BoomCMS vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-27353 CVE-2025-41000 · GHSA-97mj-hh96-r6f4

Cross-Frame Scripting (XFS) in BoomCMS

Priority LOW 11

Cross-Frame Scripting (XFS) vulnerability in BoomCMS v9.1.4 from UXB London.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00332 Published 2025-09-03 No fix listed CWE-1021
Open these records in search →