Repository navigation
Security: BraveCMS/BraveCMS-2.0
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Stored HTML Injection in Contact Email via nl2br() + Unescaped Blade TemplateGHSA-x7cg-8grr-grvx published
Apr 17, 2026 by Ajax30High -
Stored XSS in Page / Article ContentGHSA-xj46-722x-6433 published
Apr 17, 2026 by Ajax30High -
Vulnerable DependenciesGHSA-j86p-76g3-4vcv published
Apr 3, 2026 by Ajax30Critical -
Unrestricted File Upload in BraveCMS via CKEditor EndpointGHSA-9rcc-w59j-965v published
Apr 1, 2026 by Ajax30High -
Insecure Direct Object Reference in Article Image DeletionGHSA-cpf3-fxwg-cwr3 published
Apr 1, 2026 by Ajax30High -
Unrestricted File Upload via CKEditor EndpointGHSA-2j4q-6p52-4rhw published
Apr 1, 2026 by Ajax30High -
Missing Authorization Privilege EscalationGHSA-g58h-mvjw-f4hv published
Apr 1, 2026 by Ajax30High
Learn more about advisories related to BraveCMS/BraveCMS-2.0 in the GitHub Advisory Database