Vulnerability Database · Packagist · pyrocms/pyrocms · Version
pyrocms/pyrocms v3.6.5
v3.6.5 is affected by 4 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 2 High 1 Medium 1 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
pyrocms/pyrocms v3.6.5 vulnerabilities
4 vulnerabilities cover pyrocms/pyrocms v3.6.5. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2023-29689: PyroCMS remote code execution vulnerability | 9.8 critical | No fix published | 04 Aug 2023 |
| CVE-2022-37721: PyroCMS Stored Cross Site Scripting Vulnerability | 9.0 critical | No fix published | 25 Nov 2022 |
| CVE-2020-25263: PyroCMS Vulnerable to CSRF | 7.1 high | No fix published | 24 May 2022 |
| CVE-2020-25262: PyroCMS Vulnerable to CSRF | 4.3 medium | No fix published | 24 May 2022 |
Looking for another version, or everything Vulert holds for pyrocms/pyrocms?
Questions
About pyrocms/pyrocms v3.6.5
Is pyrocms/pyrocms v3.6.5 vulnerable?
Yes. 4 vulnerabilities in the Vulert database cover pyrocms/pyrocms v3.6.5: 2 critical, 1 high, 1 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor pyrocms/pyrocms for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the pyrocms/pyrocms version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.