PatchTheCVEminicms vulnerabilities and fixes
Recent CVEs affecting minicms, with upgrade or downgrade steps. 7 tracked.
minicms has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-01-05. Highest priority: CVE-2025-15457 (score 47/100).
- CVE-2025-15457 HIGH 7.3 UPGRADE A vulnerability was found in bg5sbk MiniCMS up to 1.8
- CVE-2025-15458 HIGH 7.3 UPGRADE A vulnerability was determined in bg5sbk MiniCMS up to 1.8
- CVE-2025-15455 MEDIUM 6.5 UPGRADE A flaw has been found in bg5sbk MiniCMS up to 1.8
- CVE-2025-15456 HIGH 7.3 UPGRADE A vulnerability has been found in bg5sbk MiniCMS up to 1.8
- CVE-2024-9282 MEDIUM 4.3 UPGRADE A vulnerability was found in bg5sbk MiniCMS 1.11
- CVE-2024-9281 MEDIUM 4.3 UPGRADE A vulnerability was found in bg5sbk MiniCMS up to 1.11 and classified as problematic
- CVE-2024-31741 MEDIUM 6.1 DOWNGRADE Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafte
FAQ
How do I fix minicms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is minicms being exploited right now?
None of the tracked minicms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which minicms CVE should I patch first?
CVE-2025-15457 currently ranks highest (47/100): A vulnerability was found in bg5sbk MiniCMS up to 1.8.