Vendor

AtomCMS

Products

CVEs

Across products

Status

Private

Products

Atom.CMS
10 CVEs

Recent CVEs

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-24223	Thedigitalcraft Atomcms	Cri	0.72	9.8	0.62	Feb 1, 2022	AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
CVE-2022-25487	Thedigitalcraft Atomcms	Cri	0.68	9.8	0.54	Mar 15, 2022	Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.
CVE-2022-28036	AtomCMS Atom.CMS	Cri	0.64	9.8	0.01	Apr 12, 2022	AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php
CVE-2022-28035	AtomCMS Atom.CMS	Cri	0.64	9.8	0.01	Apr 12, 2022	Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php
CVE-2022-28034	AtomCMS Atom.CMS	Cri	0.64	9.8	0.01	Apr 12, 2022	AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php
CVE-2022-28033	AtomCMS Atom.CMS	Cri	0.64	9.8	0.05	Apr 12, 2022	Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php
CVE-2022-28032	AtomCMS Atom.CMS	Cri	0.64	9.8	0.06	Apr 12, 2022	AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
CVE-2022-25488	Thedigitalcraft Atomcms	Cri	0.64	9.8	0.07	Mar 15, 2022	Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.
CVE-2023-53975	Thedigitalcraft Atomcms	Hig	0.49	7.5	0.00	Dec 22, 2025	Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL…
CVE-2022-25489	Thedigitalcraft Atomcms	Med	0.35	5.4	0.01	Mar 15, 2022	Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php.

CVE-2022-24223CriFeb 1, 2022
Thedigitalcraft
Atomcms
risk 0.72cvss 9.8epss 0.62
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
CVE-2022-25487CriMar 15, 2022
Thedigitalcraft
Atomcms
risk 0.68cvss 9.8epss 0.54
Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.
CVE-2022-28036CriApr 12, 2022
AtomCMS
Atom.CMS
risk 0.64cvss 9.8epss 0.01
AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php
CVE-2022-28035CriApr 12, 2022
AtomCMS
Atom.CMS
risk 0.64cvss 9.8epss 0.01
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php
CVE-2022-28034CriApr 12, 2022
AtomCMS
Atom.CMS
risk 0.64cvss 9.8epss 0.01
AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php
CVE-2022-28033CriApr 12, 2022
AtomCMS
Atom.CMS
risk 0.64cvss 9.8epss 0.05
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php
CVE-2022-28032CriApr 12, 2022
AtomCMS
Atom.CMS
risk 0.64cvss 9.8epss 0.06
AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
CVE-2022-25488CriMar 15, 2022
Thedigitalcraft
Atomcms
risk 0.64cvss 9.8epss 0.07
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.
CVE-2023-53975HigDec 22, 2025
Thedigitalcraft
Atomcms
risk 0.49cvss 7.5epss 0.00
Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL…
CVE-2022-25489MedMar 15, 2022
Thedigitalcraft
Atomcms
risk 0.35cvss 5.4epss 0.01
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php.