Ajax30 BraveCMS-2.0

• CVE-2026-41576 High 7.1 Ajax30/BraveCMS-2.0: Stored HTML Injection in Contact Email via nl2br() and Unescaped Blade Template 0.3%
• CVE-2026-41524 High 8.7 Ajax30/BraveCMS-2.0: Stored XSS in Page / Article Content 0.3%
• CVE-2026-35183 High 7.1 Brave CMS has an Insecure Direct Object Reference in Article Image Deletion 0.2%
• CVE-2026-35182 High 8.8 Missing Authorization Privilege Escalation 0.3%
• CVE-2026-35164 High 8.8 Brave CMS Sffected by Unrestricted File Upload via CKEditor Endpoint 0.7%
• CVE-2026-35047 Critical 9.3 Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpoint 0.6%