CVE-2025-10320

Dreamer CMS (it-eachyou Dreamer CMS) versions through 4.1.3.2 are affected by a vulnerability in the handling of /admin/user/updatePwd that results in weak password requirements. The root cause is an improper processing path for updatePwd, permitting a password policy bypass. Exploitation can be ...