CVE-2023-41892 Scanner
Detects 'Remote Code Execution (RCE)' vulnerability in Craft CMS affects v. before 4.4.15.
Used 2.3k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2023-41892
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
cms
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: cms
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →