CVE-2026-59081

The Edito CMS software is vulnerable to a deserialization of untrusted data (CWE-502) flaw because it processes JSON data without sufficient validation. While the vulnerability cannot be exploited through normal application functionality—even by administrators—an attacker capable of injecting or ...

CVE-2026-59080

The Edito CMS platform is vulnerable to JWT Exposure because it transmits JSON Web Tokens via GET requests . This configuration allows a local attacker with access to the browser history to intercept a valid token and perform actions on behalf of the victim. However, the tokens are valid for only...

CVE-2026-59079

The Edito CMS software contains an Unrestricted File Upload vulnerability in its avatar upload functionality. While the CMS generally restricts file types via the user interface, this specific component allows attackers to upload files of any type and extension without restriction. This flaw coul...

CVE-2026-59078

The Edito CMS platform is vulnerable to a Stored XSS flaw within its avatar upload functionality . An authenticated attacker can inject arbitrary HTML and JavaScript into the website, which executes when a user visits a URL associated with an edited avatar. The issue was addressed in version 5.10...

CVE-2026-59077

Edito CMS is vulnerable to Stored XSS due to insufficient validation of the content parameter within the Tiny editor functionality. An authenticated attacker can inject arbitrary HTML and JavaScript into a website. This malicious content is rendered and executed when another user attempts to edit...

CVE-2026-59076

Edito CMS is vulnerable to Stored Cross-Site Scripting (XSS) due to improper input validation. An authenticated attacker can inject malicious scripts into the givenName and surname parameters via the /api/auth/profile endpoint. These scripts execute automatically in an administrator's browser whe...

CVE-2026-59075

Edito CMS is vulnerable to a Dynamic LINQ injection flaw caused by improper input validation. An authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. By analyzing the resulting order of the returned data, an attacker can extract ...

CVE-2026-59074

The Edito CMS software is vulnerable to improper cryptographic signature verification within the JWT refresh logic . An authenticated low-privilege user can submit a self-crafted JWT containing an existing user identifier to obtain a valid, fully-signed session token for any account in the system...

Edito CMS - Sensitive Data Leak

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthorized user. id: CVE-2024-4836 info: name: Edito CMS - Sensitive Data Leak author: s4e-io severity: high description: | Web...

CVE-2024-4836

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versio...

CVE-2024-4836

Edito CMS Web services expose a sensitive data leak in versions 3.5–3.25 by allowing unauthenticated download of configuration files. The issue was fixed in releases after January 10, 2014; higher versions were never affected. Remediation: update to a version later than 3.25. No exploitation deta...

CVE-2024-4836 LFI in sites managed by Edito CMS

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versio...

CVE-2024-4836 LFI in sites managed by Edito CMS

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versio...

PT-2024-33090 · Edito Cms · Edito Cms

Name of the Vulnerable Software and Affected Versions: Edito CMS versions 3.5 through 3.25 Description: The issue allows unauthenticated users to download configuration files, leading to sensitive data leakage. The problem was resolved in releases dated from January 10th, 2014. Recommendations: F...

CVE-2024-4836: Files or Directories Accessible to External Parties

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versio...