CVE-2025-8521

A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5. This issue affects some unknown processing of the file /vadmin123/index.php?module=settings/post-types of the component Add Type Handler. The manipulation leads to cross site scripting. The attack ma...

CVE-2025-8518

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-8517

A vulnerability was detected in givanz Vvveb 1.0.6.1. Impacted is an unknown function. The manipulation results in session fixiation. The attack can be launched remotely. The exploit is now public and may be used. Upgrading to version 1.0.7 is recommended to address this issue. The patch is...

CVE-2025-8521 givanz Vvveb Add Type post-types cross site scripting

A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5. This issue affects some unknown processing of the file /vadmin123/index.php?module=settings/post-types of the component Add Type Handler. The manipulation leads to cross site scripting. The attack ma...

CVE-2025-8521 givanz Vvveb Add Type post-types cross site scripting

A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5. This issue affects some unknown processing of the file /vadmin123/index.php?module=settings/post-types of the component Add Type Handler. The manipulation leads to cross site scripting. The attack ma...

CVE-2025-8521

CVE-2025-8521 affects givanz Vvveb up to version 1.0.5. The vulnerability arises from the Add Type Handler’s processing of the file at /vadmin123/index.php?module=settings/post-types, enabling cross-site scripting. The attack can be initiated remotely, and exploits have been disclosed publicly. M...

CVE-2025-8520

A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of the file /vadmin123/?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to server-side request forgery. The attack can be...

CVE-2025-8520

CVE-2025-8520 affects givanz Vvveb up to version 1.0.5, specifically the Drag-and-Drop Editor’s /vadmin123/?module=editor/editor endpoint. The issue is a server-side request forgery triggered by manipulating the url argument, enabling remote initiation. Public exploitation has been disclosed. A f...

CVE-2025-8519

Givanz Vvveb up to 1.0.5 is affected by a vulnerability in the Drag-and-Drop Editor where manipulating the url parameter in /vadmin123/index.php?module=editor/editor leads to information disclosure. Remote attack possible; public exploit is available. Upgrade to version 1.0.6 to address the issue...

CVE-2025-8519 givanz Vvveb Drag-and-Drop Editor editor information disclosure

A vulnerability classified as problematic has been found in givanz Vvveb up to 1.0.5. This affects an unknown part of the file /vadmin123/index.php?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to information disclosure. It is possible to...

CVE-2025-8518

CVE-2025-8518 affects givanz Vvveb CMS (Code Editor, Save function in admin/controller/editor/code.php) with a code injection vulnerability in version 1.0.5. Public exploits and PoCs exist (remote-friendly, authenticated access to Code Editor can lead to RCE when modified files are executed). Aff...

CVE-2025-8518 givanz Vvveb Code Editor code.php save code injection

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-8518 givanz Vvveb Code Editor code.php save code injection

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-8517 givanz Vvveb session fixiation

A vulnerability was detected in givanz Vvveb 1.0.6.1. Impacted is an unknown function. The manipulation results in session fixiation. The attack can be launched remotely. The exploit is now public and may be used. Upgrading to version 1.0.7 is recommended to address this issue. The patch is...

Vvveb 代码问题漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. A code issue vulnerability exists in Vvveb version 1.0.5 and earlier, which stems from a server-side request forgery due to incorrect manipulation of the parameter url...

PT-2025-31828 · Unknown · Givanz Vvveb

Name of the Vulnerable Software and Affected Versions: givanz Vvveb version 1.0.6.1 Description: A vulnerability exists in givanz Vvveb that allows for session fixation. The attack can be launched remotely and the exploit has been publicly disclosed. Recommendations: Upgrade to version 1.0.7 to...

PT-2025-31855 · Unknown · Givanz Vvveb

Name of the Vulnerable Software and Affected Versions: givanz Vvveb versions up to 1.0.5 Description: A cross-site scripting issue exists due to unknown processing of the file /vadmin123/index.php?module=settings/post-types within the Add Type Handler component. The attack can be initiated...

Vvveb 注入漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. An injection vulnerability exists in Vvveb version 1.0.5, which stems from code injection due to a misbehavior of the function Save in the file...

Vvveb 安全漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. A security vulnerability exists in Vvveb version 1.0.6.1, which stems from a session fixation attack that can be remotely executed by an attacker...

Vvveb 访问控制错误漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. An access control error vulnerability exists in Vvveb version 1.0.5 and earlier, which stems from incorrect manipulation of the parameter url leading to information disclosu...