TI-2025-04875 CVE-2025-5427 · GHSA-9q7c-xvpp-ww7r
juzaweb CMS Permalinks Page permalinks access control
Priority MEDIUM 63
A vulnerability was found in juzaweb CMS up to 3.4.2.
juzaweb
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
juzaweb records in CISA KEVNo juzaweb vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records
TI-2023-25019 CVE-2023-46467 · GHSA-34fg-whr2-93rc
Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote…
Priority MEDIUM 58
Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page.
TI-2025-06117 CVE-2025-6736 · GHSA-mrph-pjv2-34f4
juzaweb CMS Add New Themes Page install improper authorization
Priority MEDIUM 57
A vulnerability classified as critical was found in juzaweb CMS 3.4.2.
TI-2025-06116 CVE-2025-6735 · GHSA-rq7x-cfmc-rq3w
juzaweb CMS Import Page imports improper authorization
Priority MEDIUM 57
A vulnerability classified as critical has been found in juzaweb CMS 3.4.2.
TI-2025-04877 CVE-2025-5429 · GHSA-x4xm-fphx-3vmh
juzaweb CMS Plugins Page install access control
Priority MEDIUM 57
A vulnerability classified as critical was found in juzaweb CMS up to 3.4.2.
TI-2025-04876 CVE-2025-5428 · GHSA-hj44-m8j3-28qx
juzaweb CMS Error Logs Page log-viewer access control
Priority MEDIUM 57
A vulnerability classified as critical has been found in juzaweb CMS up to 3.4.2.
TI-2025-04874 CVE-2025-5426 · GHSA-2723-63p7-cxpv
juzaweb CMS Menu Page menus access control
Priority MEDIUM 57
A vulnerability was found in juzaweb CMS up to 3.4.2.
TI-2025-04873 CVE-2025-5425 · GHSA-h2gw-573j-3mjj
juzaweb CMS Theme Editor Page default access control
Priority MEDIUM 57
A vulnerability was found in juzaweb CMS up to 3.4.2.
TI-2025-04872 CVE-2025-5424 · GHSA-hj4w-822p-4954
juzaweb CMS Media Page media access control
Priority MEDIUM 57
A vulnerability was found in juzaweb CMS up to 3.4.2 and classified as critical.
TI-2025-04871 CVE-2025-5423 · GHSA-prpg-pmrg-22qq
juzaweb CMS General Setting Page general access control
Priority MEDIUM 57
A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical.
TI-2025-04870 CVE-2025-5422 · GHSA-65vx-9qgr-7v68
juzaweb CMS Email Logs Page email access control
Priority MEDIUM 57
A vulnerability, which was classified as problematic, was found in juzaweb CMS up to 3.4.2.
TI-2025-04869 CVE-2025-5421 · GHSA-whcf-89c7-82f4
juzaweb CMS Plugin Editor Page editor access control
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in juzaweb CMS up to 3.4.2.
TI-2025-04868 CVE-2025-5420 · GHSA-49rr-34j5-r8mw
juzaweb CMS Profile Page upload cross site scripting
Priority MEDIUM 56
A vulnerability classified as problematic was found in juzaweb CMS up to 3.4.2.
TI-2024-06999 CVE-2024-7551 · GHSA-524f-m549-hffh
juzaweb CMS Theme Editor default path traversal
Priority MEDIUM 56
A vulnerability was found in juzaweb CMS up to 3.4.2.
TI-2023-25329 CVE-2023-46906 · GHSA-93p6-9cxv-5rpq
juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application…
Priority MEDIUM 56
juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code.
TI-2023-25020 CVE-2023-46468 · GHSA-h92m-4g9m-72vr
An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary…
Priority LOW 35
An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.