CVE-2025-5497

🗓️ 03 Jun 2025 13:00:16Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 54 Views🌐 WEB

Critical deserialization vulnerability in slackero phpwcms Feedimport Module affects versions up to 1.10.8.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-5497	3 Jun 202514:02	–	circl
CNNVD	phpwcms 代码问题漏洞	3 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-5497 slackero phpwcms Feedimport processing.inc.php deserialization	3 Jun 202513:00	–	cvelist
EUVD	EUVD-2025-16727	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5497	3 Jun 202513:15	–	nvd
Positive Technologies	PT-2025-23612 · Phpcms · Phpcms	3 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5497	5 Jun 202513:21	–	redhatcve
Vulnrichment	CVE-2025-5497 slackero phpwcms Feedimport processing.inc.php deserialization	3 Jun 202513:00	–	vulnrichment

NVD

Vulners

Node

phpwcms phpwcmsRange<1.10.8

[
  {
    "vendor": "slackero",
    "product": "phpwcms",
    "versions": [
      {
        "version": "1.9.0",
        "status": "affected"
      },
      {
        "version": "1.9.1",
        "status": "affected"
      },
      {
        "version": "1.9.2",
        "status": "affected"
      },
      {
        "version": "1.9.3",
        "status": "affected"
      },
      {
        "version": "1.9.4",
        "status": "affected"
      },
      {
        "version": "1.9.5",
        "status": "affected"
      },
      {
        "version": "1.9.6",
        "status": "affected"
      },
      {
        "version": "1.9.7",
        "status": "affected"
      },
      {
        "version": "1.9.8",
        "status": "affected"
      },
      {
        "version": "1.9.9",
        "status": "affected"
      },
      {
        "version": "1.9.10",
        "status": "affected"
      },
      {
        "version": "1.9.11",
        "status": "affected"
      },
      {
        "version": "1.9.12",
        "status": "affected"
      },
      {
        "version": "1.9.13",
        "status": "affected"
      },
      {
        "version": "1.9.14",
        "status": "affected"
      },
      {
        "version": "1.9.15",
        "status": "affected"
      },
      {
        "version": "1.9.16",
        "status": "affected"
      },
      {
        "version": "1.9.17",
        "status": "affected"
      },
      {
        "version": "1.9.18",
        "status": "affected"
      },
      {
        "version": "1.9.19",
        "status": "affected"
      },
      {
        "version": "1.9.20",
        "status": "affected"
      },
      {
        "version": "1.9.21",
        "status": "affected"
      },
      {
        "version": "1.9.22",
        "status": "affected"
      },
      {
        "version": "1.9.23",
        "status": "affected"
      },
      {
        "version": "1.9.24",
        "status": "affected"
      },
      {
        "version": "1.9.25",
        "status": "affected"
      },
      {
        "version": "1.9.26",
        "status": "affected"
      },
      {
        "version": "1.9.27",
        "status": "affected"
      },
      {
        "version": "1.9.28",
        "status": "affected"
      },
      {
        "version": "1.9.29",
        "status": "affected"
      },
      {
        "version": "1.9.30",
        "status": "affected"
      },
      {
        "version": "1.9.31",
        "status": "affected"
      },
      {
        "version": "1.9.32",
        "status": "affected"
      },
      {
        "version": "1.9.33",
        "status": "affected"
      },
      {
        "version": "1.9.34",
        "status": "affected"
      },
      {
        "version": "1.9.35",
        "status": "affected"
      },
      {
        "version": "1.9.36",
        "status": "affected"
      },
      {
        "version": "1.9.37",
        "status": "affected"
      },
      {
        "version": "1.9.38",
        "status": "affected"
      },
      {
        "version": "1.9.39",
        "status": "affected"
      },
      {
        "version": "1.9.40",
        "status": "affected"
      },
      {
        "version": "1.9.41",
        "status": "affected"
      },
      {
        "version": "1.9.42",
        "status": "affected"
      },
      {
        "version": "1.9.43",
        "status": "affected"
      },
      {
        "version": "1.9.44",
        "status": "affected"
      },
      {
        "version": "1.9.45",
        "status": "affected"
      },
      {
        "version": "1.10.0",
        "status": "affected"
      },
      {
        "version": "1.10.1",
        "status": "affected"
      },
      {
        "version": "1.10.2",
        "status": "affected"
      },
      {
        "version": "1.10.3",
        "status": "affected"
      },
      {
        "version": "1.10.4",
        "status": "affected"
      },
      {
        "version": "1.10.5",
        "status": "affected"
      },
      {
        "version": "1.10.6",
        "status": "affected"
      },
      {
        "version": "1.10.7",
        "status": "affected"
      },
      {
        "version": "1.10.8",
        "status": "affected"
      },
      {
        "version": "1.9.46",
        "status": "unaffected"
      },
      {
        "version": "1.10.9",
        "status": "unaffected"
      }
    ],
    "modules": [
      "Feedimport Module"
    ]
  }
]

Source	Link
github	www.github.com/slackero/phpwcms/commit/41a72eca0baa9d9d0214fec97db2400bc082d2a9
github	www.github.com/3em0/cve_repo/blob/main/phpwcms/phar%20vulnerability%20in%20phpwcms.md
github	www.github.com/slackero/phpwcms/releases/tag/v1.10.9
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
cnt_text	path	include/inc_module/mod_feedimport/inc/processing.inc.php	Deserialization vulnerability in Feedimport Module via manipulated cnt_text parameter leading to remote code execution	CWE-502, CWE-20

29 Apr 2026 01:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.3 - 9.8

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.0046

SSVC

vulnerability deserialization slackero phpwcms