Directory Traversal

Overview vvvebjs is a Drag and drop website builder javascript library Affected versions of this package are vulnerable to Directory Traversal via the File argument in the /save.php endpoint. An attacker can access or modify files outside the intended directory by supplying crafted input to the...

CVE-2025-8522

A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file /save.php of the component node.js. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The complexity o...

CVE-2025-8522

CVE-2025-8522 affects givanz Vvvebjs up to version 2.0.4, where a vulnerability in the node.js component allows path traversal via the File argument in the file /save.php. Remote exploitation is possible with high attack complexity; exploitability is reported as difficult, and a public exploit ex...

CVE-2025-8522 givanz Vvvebjs node.js save.php path traversal

A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file /save.php of the component node.js. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The complexity o...

CVE-2025-8522 givanz Vvvebjs node.js save.php path traversal

A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file /save.php of the component node.js. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The complexity o...

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator by Givan Personal Developers. A security vulnerability exists in VvvebJs 2.0.4 and earlier versions, which stems from a path traversal due to incorrect manipulation of the parameter File...

PT-2025-31857 · Unknown · Givanz Vvveb

Name of the Vulnerable Software and Affected Versions: givanz Vvvebjs versions up to 2.0.4 Description: A critical vulnerability exists in givanz Vvvebjs up to version 2.0.4. The issue is related to path traversal, stemming from the manipulation of the File argument within an unknown function of...

CVE-2024-29271

Reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

CVE-2024-29272

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

Exploit for Unrestricted Upload of File with Dangerous Type in Vvveb Vvvebjs

CVE-2024-29272 This is a Proof-of-Concept fo...

VvvebJs Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

GHSA-PMM3-68Q9-57JG VvvebJs Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability

A reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.5 allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

GHSA-PC95-3WGM-X28P VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability

A reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.5 allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

CVE-2024-29271

Reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

CVE-2024-29272

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator for Givan Personal Developers. A security vulnerability exists in VvvebJs prior to version 1.7.7, which stems from an arbitrary file upload vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code and obtain sensitive...

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator for Givan Personal Developers. A security vulnerability exists in VvvebJs prior to version 1.7.7, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that allows remote attackers to execute arbitrary code and obtain...

CVE-2024-29272

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

CVE-2024-29272

CVE-2024-29272 affects VvvebJs prior to 1.7.5. An unauthenticated attacker can upload arbitrary files via the sanitizeFileName parameter in save.php, enabling potential remote code execution and exposure of sensitive data. The CVSSv3.1 base score is 6.5 (Medium) with network attack vector, no pri...