CVE-2025-8975

CVE-2025-8975 affects givanz Vvveb up to 1.0.5, where the slug parameter is mishandled in the file admin/template/content/edit.tpl, enabling cross-site scripting. The issue can be exploited remotely and the exploit has been disclosed publicly. A fix is available in version 1.0.6; patch hash: 84c1...

CVE-2025-8975: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in givanz Vvveb up to 1.0.5. This affects an unknown part of the file admin/template/content/edit.tpl. The manipulation of the argument slug leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

PT-2025-33404 · Unknown · Givanz Vvveb

Name of the Vulnerable Software and Affected Versions: givanz Vvveb versions up to 1.0.5 Description: A vulnerability was identified in givanz Vvveb up to version 1.0.5. This affects an unknown part of the file admin/template/content/edit.tpl. The manipulation of the argument slug leads to...

CVE-2025-50692

FoxCMS =v1.2.5 is vulnerable to Code Execution in admin/templatefile/editFile.html...

CVE-2025-50692

FoxCMS =v1.2.5 is vulnerable to Code Execution in admin/templatefile/editFile.html...

CVE-2025-50692

FoxCMS =v1.2.5 is vulnerable to Code Execution in admin/templatefile/editFile.html...

PT-2025-32304 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS versions prior to 1.2.5 Description: FoxCMS is susceptible to code execution via the admin/template file/editFile.html endpoint. Recommendations: Update FoxCMS to a version later than 1.2.5...

CVE-2024-5379

A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template. The manipulation of the argument directory leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-31611

SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...

emlog 安全漏洞

emlog is emlog open source a set of PHP and MySQL based CMS website builder . A security vulnerability exists in emlog pro 2.5.0 and pro 2.5. versions, which stems from an arbitrary file upload issue in the /admin/template.php component that could lead to the execution of arbitrary code...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

PT-2025-8717

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was discovered in the admin template.php component, allowing for potential code execution. Recommendations For SeaCMS version 13.3, update to a newer version that contains a fix for...

CVE-2025-25796

The open-source web content management system SeaCMS v13.3 contains a remote code execution (RCE) vulnerability within the admin_template.php component. The root cause is identified as improper neutralization of special elements used in a command (Command Injection). This flaw allows for potentia...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from a Remote Code Execution RCE issue in the component admintemplate.php...

The vulnerability of the phpgacl/acl_admin.tpl template in the PHP library for managing access in web applications. This is part of the phpGACL system used for managing medical documentation in OpenEMR. It allows attackers to perform cross-site scripting attacks.

The vulnerability of the phpgacl/acladmin.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the action template parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site...

CVE-2024-10768

A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unittesting/templates/twotables.php. The manipulation of the argument scripts leads to cross site scripting. The...

CVE-2024-48138

A remote code execution RCE vulnerability in the component /PluXml/core/admin/parametresedittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via injecting a crafted payload into a template...

CVE-2024-46475

A reflected cross-site scripting XSS vulnerability on the homepage of Metronic Admin Dashboard Template v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-8782

A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the publ...