Advisories · Technology

CouchCMS.

Every CVE that names CouchCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-47955 CVE record

CVSS 5.1 Medium

CouchCMS 2.2.1 Cross-Site Scripting via SVG File Upload
- CouchCMS
- Cross-site scripting (XSS)
Not analysed yet 16 May 2026
CVE-2021-47958 CVE record

CVSS 5.3 Medium

CouchCMS 2.2.1 Server-Side Request Forgery via SVG upload
- CouchCMS
- Server-side request forgery (SSRF)
Not analysed yet 15 May 2026
CVE-2026-29002 CVE record

CVSS 8.6 High

CouchCMS Privilege Escalation via f_k_levels_list Parameter
- CouchCMS
- Broken access control
Not analysed yet 10 Apr 2026
CVE-2025-15005 CVE record

CVSS 6.3 Medium

CouchCMS reCAPTCHA config.example.php hard-coded key
- CouchCMS
- Hard-coded credentials
- CWE-320
Not analysed yet 22 Dec 2025