Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Grabaperch Clear all filters
TI-2023-30173 CVE-2023-53890 · GHSA-j5m3-4q76-pf42

Perch CMS 3.2 Stored Cross-Site Scripting via SVG File Upload

Priority MEDIUM 56

Perch CMS 3.2 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00236 Published 2025-12-15 No fix listed CWE-79
TI-2023-30172 CVE-2023-53889 · GHSA-gvhr-6xq2-2p5f

Perch CMS 3.2 Remote Code Execution via Unrestricted File Upload

Priority HIGH 72

Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00924 Published 2025-12-15 No fix listed CWE-434