CVE-2026-36239
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
PbootCMS version 3.2.11 contains a code injection vulnerability in its site configuration functionality.
Risk Assessment
An attacker can inject malicious code, potentially leading to site takeover or unauthorized actions.
Recommendation
Upgrade PbootCMS to the latest available version or apply available patches.
Other vulnerabilities in PbootCMS
See all- CVE-2026-67960Critical
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components.
- CVE-2023-39834Critical
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.
- CVE-2020-20363Medium
A Cross-Site Scripting (XSS) vulnerability was found in PbootCMS version 2.0.3 in the admin.php file. It allows an attacker to inject malicious JavaScript code into the admin panel.
Original NVD description (English source)
PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality