How many CVEs does Ajax30 have?

Ajax30 has 6 published CVE records since 2026, including 6 in the last two years.

How many Ajax30 CVEs are in CISA KEV?

None of Ajax30's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Ajax30 products have the most CVEs?

The Ajax30 products with the most published CVEs are BraveCMS-2.0, bravecms.

What are the most common weakness types in Ajax30 CVEs?

Ajax30's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).

Are there public exploits for Ajax30 vulnerabilities?

Yes — 4 of Ajax30's CVEs have a known public exploit.

How many critical Ajax30 vulnerabilities are there?

Ajax30 has 1 critical and 5 high-severity CVEs.

What is the average severity of Ajax30 CVEs?

The average CVSS base score across Ajax30's scored CVEs is 8.3.

Ajax30 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 8.3
Critical / high: 100%
Actively exploited (KEV): 0%
Public exploit available: 67%
Patch available: 100%

Ajax30 Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Latest Ajax30 CVEs

Other vendors

Frequently asked questions

References

Track Ajax30 vulnerabilities