CVE-2025-28089

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF via the Scheduled Task function...

CVE-2025-28089

creationtimestamp| type| source ---|---|--- 2025-03-28 21:28:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9466 2025-03-29 00:26:56+00:00| seen| https://t.me/cvedetector/21478 2025-03-31 23:48:48+00:00| seen|...

CVE-2025-28089

The open-source PHP + MYSQL website building system maccms10 version v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) . The flaw originates within the Scheduled Task function , which could allow an attacker to make unauthorized requests from the server. As a mitigation, it is r...