CVE-2024-56145 1

CVE-2024-56145: Craft CMS Code Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jun 02, 2025

Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled.

Vulnerabilities & Patching