Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.7 HIGH
CVE-2025-69437 — PublicCMS Stored XSS in PDF Upload

PublicCMS v5.202506.d and earlier is vulnerable to stored XSS. Uploaded PDFs can contain JavaScript payloads and bypass PDF security checks in the backend CmsFileUtils.java. If a user uploads a PDF f…

publiccms | Remote | Cross-Site Scripting
Feb 27, 2026 Mar 05, 2026
Feb 27, 2026
Mar 05, 2026
Showing 20 of 5921 Results