Known Vulnerabilities for products from Anchorcms
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Anchorcms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-46041 json | A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via t... | Not Provided | 2025-06-09 | 2026-07-05 |
| CVE-2022-25576 json | Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. T... | 4.5 - MEDIUM | 2022-03-24 | 2022-03-29 |
| CVE-2021-46253 json | A cross-site scripting (XSS) vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbi... | 5.4 - MEDIUM | 2022-02-01 | 2022-02-04 |
| CVE-2021-44116 json | Cross Site Scripting (XSS) vulnerability exits in Anchor CMS <=0.12.7 in posts.php. Attackers can use the posts column to upl... | 6.1 - MEDIUM | 2021-12-15 | 2021-12-20 |
| CVE-2020-23342 json | A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users. | 8.8 - HIGH | 2021-01-19 | 2021-02-01 |
| CVE-2020-12071 json | Anchor 0.12.7 allows admins to cause XSS via crafted post content. | 4.8 - MEDIUM | 2020-04-23 | 2020-04-27 |
| CVE-2018-7251 json | An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MyS... | 9.8 - CRITICAL | 2018-02-19 | 2019-10-03 |
| CVE-2015-5687 json | system/session/drivers/cookie.php in Anchor CMS 0.9.x allows remote attackers to conduct PHP object injection attacks and exe... | Not Provided | 2015-10-05 | 2026-05-06 |
| CVE-2015-5060 json | Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev. | 6.1 - MEDIUM | 2017-09-07 | 2017-09-13 |
| CVE-2014-9182 json | models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via... | Not Provided | 2014-12-02 | 2026-05-06 |
Known software with vulnerabilities from Anchorcms
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Anchorcms | Anchor | 0.11 |
| Application | Anchorcms | Anchor Cms | 0.11 |