greencms vulnerabilities and fixes

Recent CVEs affecting greencms, with upgrade or downgrade steps. 4 tracked.

greencms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-12-29. Highest priority: CVE-2025-9415 (score 35/100).

• CVE-2025-14244 LOW 2.4 DOWNGRADE A flaw has been found in GreenCMS 2.3.0603
• CVE-2025-15187 LOW 3.8 UPGRADE A vulnerability was found in GreenCMS up to 2.3
• CVE-2025-9415 MEDIUM 6.3 UPGRADE A vulnerability was identified in GreenCMS up to 2.3.0603
• CVE-2024-22570 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 a

FAQ

How do I fix greencms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is greencms being exploited right now?

None of the tracked greencms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which greencms CVE should I patch first?

CVE-2025-9415 currently ranks highest (35/100): A vulnerability was identified in GreenCMS up to 2.3.0603.

RSS feed for greencms · ← Back to latest CVEs