CVE-2026-25615

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668...

Blesta Security Breach

Blesta is a customer relationship management system from Blesta. A security vulnerability exists in Blesta versions prior to v5.9.2 that stems from a path traversal vulnerability in the /path/to/uploads/ directory. An attacker can exploit this vulnerability to take over a user account and execute...