PatchTheCVEframework vulnerabilities and fixes
Recent CVEs affecting framework, with upgrade or downgrade steps. 7 tracked.
framework has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-04-10. Highest priority: CVE-2024-52301 (score 61/100).
- CVE-2025-30148 MEDIUM 5.4 UPGRADE Silverstripe Framework is a PHP framework which powers the Silverstripe CMS
- CVE-2025-27515 CRITICAL 9.8 UPGRADE Laravel is a web application framework
- CVE-2024-9443 MEDIUM 6.4 UPGRADE The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads
- CVE-2024-53277 MEDIUM 5.4 UPGRADE Silverstripe Framework is a PHP framework which powers the Silverstripe CMS
- CVE-2024-52301 HIGH 7.5 UPGRADE MITIGATE Laravel is a web application framework
- CVE-2024-13919 HIGH 8.0 UPGRADE The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting du
- CVE-2024-13918 HIGH 8.0 UPGRADE The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting du
FAQ
How do I fix framework vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is framework being exploited right now?
None of the tracked framework CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which framework CVE should I patch first?
CVE-2024-52301 currently ranks highest (61/100): Laravel is a web application framework.