pagekit CMS vulnerabilities

Latest pagekit CMS CVEs

Newest publication first

1. CVE-2026-6652 Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injection

   Published 2026-04-20

   Medium·CVSS 5.1

   A weakness has been identified in Pagekit CMS up to 1.0.18. This issue affects the function evaluate of the file app/modules/view/src/PhpEngine.php of the component StringStorage Template Handler. This manipulation causes improper neutralization of directives in dynamically evalu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.