BoidCMS

Products

ProductCVEsExploitedLatest
BoidCMS2–Apr 14, 2026

Exploited and recent CVEs

  • CVE-2026-39387 High 7.2 BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameter 0.7%
  • CVE-2024-53255 Medium 5.3 Reflected Cross-site Scripting in /admin?page=media via file Parameter in BoidCMS 1.0%