Perch
Grabaperch · 4 CVEs
CVE-2025-66686
MEDIUM
A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated attacker with admin…
Jan 7, 2026
CVE-2023-53890
MEDIUM
Perch CMS 3.2 Stored Cross-Site Scripting via SVG File Upload
Dec 15, 2025
CVE-2023-53889
HIGH
Perch CMS 3.2 Remote Code Execution via Unrestricted File Upload
Dec 15, 2025
CVE-2017-15948
MEDIUM
Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in…
Oct 28, 2017
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-66686 | A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated attacker with administrative privileges can inject maliciou… | MEDIUM | 0.22% | Jan 7, 2026 |
| CVE-2023-53890 | Perch CMS 3.2 Stored Cross-Site Scripting via SVG File Upload | MEDIUM | 0.24% | Dec 15, 2025 |
| CVE-2023-53889 | Perch CMS 3.2 Remote Code Execution via Unrestricted File Upload | HIGH | 0.93% | Dec 15, 2025 |
| CVE-2017-15948 | Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field.… | MEDIUM | 0.59% | Oct 28, 2017 |
Showing 1 to 4 of 4 CVEs