Vvveb security vulnerabilities

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. A security vulnerability exists in Vvveb version 1.0.7.2 and earlier, which stems from an information disclosure issue in the Image Handler component...

CVE-2025-9416

The CVE-2025-9416 entry concerns the oitcode samarium project (versions up to 0.9.6) and a Cross‑Site Scripting flaw in the /cms/webpage/ area of the Pages Image Handler. The vulnerability can be exploited remotely to impact user data/experience, with exploit code publicly available. Publicly doc...

Cross-Site Scripting (XSS)

ContentTools is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of the onload argument in the Image Handler component, allowing an attacker to exploit it...