CVE-2024-56145 Craft CMS Craft CMS
Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled.
- CVSS
- not scored
On CISA’s exploited list
Craft CMS Code Injection Vulnerability
- Added
- 2025-06-02
- Federal patch deadline
- 2025-06-23
- Ransomware use
- not known