CVE-2025-67164

Pagekit CMS version 1.0.18 is vulnerable to an authenticated arbitrary file upload vulnerability within the /storage/poc.php component. This flaw allows an authenticated attacker to upload a crafted PHP file, leading to arbitrary code execution . To remediate this, users should update to a newer ...

CVE-2025-67165

An Insecure Direct Object Reference IDOR in Pagekit CMS v1.0.18 allows attackers to escalate privileges...