All packages
Cornerstone vulnerabilities
3 known CVE vulnerabilities in Cornerstone, translated and rated.
- CVE-2026-54185High
Subscriber SQL Injection vulnerability in Cornerstone versions below 7.8.8 allows attackers to execute malicious SQL queries.
- CVE-2026-49113High
In Cornerstone versions below 7.8.8, there is a vulnerability allowing arbitrary code execution by a subscriber.
- CVE-2025-63072Medium
Stored XSS vulnerability in Cornerstone plugin by THEMECO. Improper input neutralization during web page generation allows persistent script injection.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS