Ajax30 vulnerabilities
6 published CVEs name Ajax30 among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-41576
Ajax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade Template
Ajax30 · BraveCMS-2.0
High7.1 - CVE-2026-41524
Ajax30/BraveCMS-2.0: Stored XSS in Page / Article Content
Ajax30 · BraveCMS-2.0
High8.7 - CVE-2026-35183
Brave CMS has an Insecure Direct Object Reference in Article Image Deletion
Ajax30 · BraveCMS-2.0
High7.1 - CVE-2026-35182
Missing Authorization Privilege Escalation
Ajax30 · BraveCMS-2.0
High8.8 - CVE-2026-35164
Brave CMS Sffected by Unrestricted File Upload via CKEditor Endpoint
Ajax30 · BraveCMS-2.0
High8.8 - CVE-2026-35047
Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpoint
Ajax30 · BraveCMS-2.0
Critical9.3