🔍 What is Perch?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-53889

HIGH CVSS 7.2 Dec 15, 2025

CVE-2023-53889 is a remote code execution vulnerability in Perch CMS 3.2 that allows authenticated administrators to upload malicious PHP files through the assets interface. Attackers can execute arbi...

CVE-2025-66686

MEDIUM CVSS 6.1 Jan 7, 2026

A stored XSS vulnerability in Perch CMS 3.2 allows authenticated administrators to inject malicious JavaScript into the Help button URL setting. When other authenticated users click the Help button, t...

CVE-2023-53890

MEDIUM CVSS 5.4 Dec 15, 2025

Perch CMS 3.2 contains a stored cross-site scripting vulnerability where authenticated users can upload malicious SVG files containing JavaScript. When these files are viewed, the embedded scripts exe...