GCVE - cpe:2.3:a:pagekit:pagekit:1.0.18:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pagekit:pagekit:1.0.18:*:*:*:*:*:*:*

part: a version: 1.0.18 update: *

Vendor	Pagekit (`b1670d8d-887f-54d6-b8d5-1ff7a0a706e6`)
Product	Pagekit (`1b5690b8-384c-542a-a58d-3a29d04cb066`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:docker/pagekit/pagekit`	purl2cpe	2026-06-01 10:17:36.174842
`pkg:github/pagekit/pagekit`	purl2cpe	2026-06-01 10:17:36.174844
`pkg:sourceforge/pagekit.mirror`	purl2cpe	2026-06-01 10:17:36.174845

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-67165`	vulnerable	2026-06-08 07:41:19.733087	Details available An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges. Published: 2025-12-17T00:00:00.000Z Updated: 2025-12-17T18:48:24.402Z Open on db.gcve.eu Reference links https://github.com/pagekit/pagekit https://github.com/pagekit/docs/blob/develop/user-interface/users.md#roles https://github.com/pagekit/docs/blob/develop/user-interface/users.md#permissions https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67165	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-67164`	vulnerable	2026-06-08 07:41:19.732614	Details available An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file. Published: 2025-12-17T00:00:00.000Z Updated: 2025-12-17T18:33:33.907Z Open on db.gcve.eu Reference links https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67164	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45967`	vulnerable	2026-06-08 06:48:09.880572	Details available Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget. Published: 2024-10-01T00:00:00.000Z Updated: 2024-10-01T14:44:11.624Z Open on db.gcve.eu Reference links https://github.com/yingning620/test123/blob/main/Pagekit%20CMS/Pagekit%20CMS%20v1.0.18%20%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41005`	vulnerable	2026-06-08 06:11:04.809920	Details available An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php Published: 2023-08-28T00:00:00.000Z Updated: 2024-10-02T15:03:12.408Z Open on db.gcve.eu Reference links https://github.com/pagekit/pagekit/issues/977	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38916`	vulnerable	2026-06-08 05:47:17.536716	Details available A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files Published: 2022-09-20T16:09:40.000Z Updated: 2025-05-27T18:09:09.012Z Open on db.gcve.eu Reference links https://github.com/pagekit/pagekit/issues/970	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36573`	vulnerable	2026-06-08 05:46:07.570648	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32245`	vulnerable	2026-06-08 05:31:54.726847	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.