Vulnerabilities

TI-2026-30131 CVE-2026-41576

Ajax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade Template

LOW 31

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2026-05-08 Fixed in 6c56603 CWE-79

TI-2026-30107 CVE-2026-41524

HIGH 71

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00261 Published 2026-05-08 Fixed in 6c56603 CWE-79

TI-2026-27337 CVE-2026-35183

MEDIUM 64

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00209 Published 2026-04-06 Fixed in 2.0.6 CWE-639

TI-2026-27336 CVE-2026-35182

HIGH 73

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00349 Published 2026-04-06 Fixed in 2.0.6 CWE-862

TI-2026-27318 CVE-2026-35164

HIGH 73

Brave CMS is an open-source CMS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0072 Published 2026-04-06 Fixed in 2.0.6 CWE-434

TI-2026-27250 CVE-2026-35047

MEDIUM 49

Brave CMS is an open-source CMS.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00564 Published 2026-04-06 Fixed in 2.0.6 CWE-434