BoidCMS
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BoidCMS | 2 | – | Apr 14, 2026 |
Exploited and recent CVEs
- CVE-2026-39387 BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameter 0.7%
- CVE-2024-53255 Reflected Cross-site Scripting in /admin?page=media via file Parameter in BoidCMS 1.0%