Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/764041ca-65cd-498c-97e5-a33d7b54a2b9?source=cve - https://plugins.trac.wordpress.org/browser/cleverreach-wp/tags/1.5.20/Controllers/class-clever-reach-article-search-controller.php#L159 - https://wordpress.org/plugins/cleverreach-wp/#developers
CVE ID: CVE-2025-7037 State: PUBLISHED Published: 2025-07-08T14:54:42.789Z Last Updated: 2025-07-08T15:07:12.721Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote authenticated attacker with admin privileges to read arbitrary data from the database Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-July-2025-for-Ivanti-EPM-2024-SU2-and-EPM-2022-SU8?language=en_US
CVE ID: CVE-2025-7038 State: PUBLISHED Published: 2025-09-30T04:27:07.535Z Last Updated: 2025-09-30T15:40:19.475Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: latepoint Products: LatePoint – Calendar Booking Plugin for Appointments and Events Problem Types: CWE-288 Description: The LatePoint plugin for WordPress is vulnerable to Authentication Bypass due to insufficient identity verification within the steps__load_step route of the latepoint_route_call AJAX endpoint in all versions up to, and including, 5.1.94. The endpoint reads the client-supplied customer email and related customer fields before invoking the internal login handler without verifying login
t-supplied customer email and related customer fields before invoking the internal login handler without verifying login status, capability checks, or a valid AJAX nonce. This makes it possible for unauthenticated attackers to log into any customer’s account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d7389e17-a357-481a-8716-3a93cb6afa7c?source=cve - https://wordpress.org/plugins/latepoint/#developers - https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/latepoint.php - https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/lib/controllers/steps_controller.php - https://plugins.trac.wordpre
ins.trac.wordpress.org/browser/latepoint/tags/5.1.93/lib/controllers/steps_controller.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3366851%40latepoint&new=3366851%40latepoint&sfp_email=&sfph_mail=
CVE ID: CVE-2025-7039 State: PUBLISHED Published: 2025-09-03T01:52:02.824Z Last Updated: 2025-09-03T15:44:33.881Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-22 Description: A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths
temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-7039 - https://bugzilla.redhat.com/show_bug.cgi?id=2392423
CVE ID: CVE-2025-7040 State: PUBLISHED Published: 2025-09-06T03:22:36.142Z Last Updated: 2025-09-08T20:18:18.232Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: cloudinfrastructureservices Products: Cloud SAML SSO – Single Sign On Login Problem Types: CWE-862 Description: The Cloud SAML SSO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'set_organization_settings' action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. The handler reads client-supplied POST parameters for organization settings and passes them directly to update_option() without any check of th
t-supplied POST parameters for organization settings and passes them directly to update_option() without any check of the user’s capabilities or a CSRF nonce. This makes it possible for unauthenticated attackers to change critical configuration (including toggling signing and encryption), potentially breaking the SSO flow and causing a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/59622166-3316-42e5-bf28-69eb38231755?source=cve - https://wordpress.org/plugins/cloud-sso-single-sign-on/#developers - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/base/CSSO_Acti
n-on/#developers - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/base/CSSO_ActionHandler.php - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/base/CSSO_services.php - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/CSSO_Init.php - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/saml-sso-plugin.php - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/trunk/assets/base/CSSO_ActionHandler.php?rev=3354459#L202
CVE ID: CVE-2025-7042 State: PUBLISHED Published: 2025-07-15T15:04:43.023Z Last Updated: 2025-07-15T15:18:44.321Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-416 Description: Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted IPT file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-7042
CVE ID: CVE-2025-7045 State: PUBLISHED Published: 2025-09-06T03:22:36.869Z Last Updated: 2025-09-08T14:05:21.397Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: cloudinfrastructureservices Products: Cloud SAML SSO – Single Sign On Login Problem Types: CWE-306 Description: The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on the delete_config action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. This makes it possible for unauthenticated attackers to delete any configured IdP, breaking the SSO authentication flow and causing a denial-of-service. Additiona
attackers to delete any configured IdP, breaking the SSO authentication flow and causing a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/87099513-d8e2-45e5-b7e6-b46558a10d3b?source=cve - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/saml-sso-plugin.php - https://wordpress.org/plugins/cloud-sso-single-sign-on/#developers - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/CSSO_Init.php - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/base/CSSO_ActionHandler.php - https://plugins.trac.word
ordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/base/CSSO_ActionHandler.php - https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/trunk/assets/base/CSSO_ActionHandler.php?rev=3354459#L130
CVE ID: CVE-2025-7046 State: PUBLISHED Published: 2025-07-04T01:44:00.580Z Last Updated: 2025-07-08T17:39:20.541Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dotrex Products: Portfolio for Elementor & Image Gallery | PowerFolio Problem Types: CWE-79 Description: The Portfolio for Elementor & Image Gallery | PowerFolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS Attributes of Plugin's widgets in all versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web script
s makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The issue was partially fixed in version 3.2.0 and fully fixed in version 3.2.1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/11f01584-e389-4551-b151-f3f0686d1d5d?source=cve - https://plugins.trac.wordpress.org/browser/portfolio-elementor/trunk/elementor/elementor-widgets/portfolio_widget.php#L541 - https://plugins.trac.wordpress.org/browser/portfolio-elementor/trunk/elementor/elementor-widgets/image_gallery_widget.php#L492 - h
ugins.trac.wordpress.org/browser/portfolio-elementor/trunk/elementor/elementor-widgets/image_gallery_widget.php#L492 - https://plugins.trac.wordpress.org/changeset/3318503/
CVE ID: CVE-2025-7049 State: PUBLISHED Published: 2025-09-10T06:38:45.603Z Last Updated: 2025-09-10T16:10:54.571Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: dasinfomedia Products: WPGYM - Wordpress Gym Management System Problem Types: CWE-639 Description: The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJ_gmgt_gmgt_add_user' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the email, password, and other details of any user, including Ad
kers, with Subscriber-level access and above, to change the email, password, and other details of any user, including Administrator users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/17951f68-8481-477b-a940-cce637f6ec54?source=cve - https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964
CVE ID: CVE-2025-7050 State: PUBLISHED Published: 2025-08-05T06:39:48.769Z Last Updated: 2025-08-05T15:58:15.939Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: WP Cloud Plugins/_deleeuw_ Products: Use-your-Drive | Google Drive plugin for WordPress Problem Types: CWE-79 Description: The Use-your-Drive | Google Drive plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in file metadata in all versions up to, and including, 3.3.1 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pages that will execute whenever a user acc
ing. This makes it possible for attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability can be exploited by the lowest authentication level permitted to upload files, including unauthenticated users, once a file upload shortcode is published on a publicly accessible post. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/de0c8922-b290-4582-9079-e79da684bcff?source=cve - https://wpcloudplugins.gitbook.io/docs/other/changelog
CVE ID: CVE-2025-7051 State: PUBLISHED Published: 2025-08-21T17:34:31.126Z Last Updated: 2025-08-22T03:55:44.928Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: N-able Products: N-central Problem Types: CWE-284 Description: On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.2_Release_Notes.htm
CVE ID: CVE-2025-7052 State: PUBLISHED Published: 2025-09-30T04:27:07.926Z Last Updated: 2025-09-30T15:40:47.928Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: latepoint Products: LatePoint – Calendar Booking Plugin for Appointments and Events Problem Types: CWE-352 Description: The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94. This is due to missing nonce validation on the change_password() function of its customer_cabinet__change_password AJAX route. The plugin hooks this endpoint via wp_ajax and wp_ajax_nopriv but does not verify a nonce or user capability before resetting the user
ks this endpoint via wp_ajax and wp_ajax_nopriv but does not verify a nonce or user capability before resetting the user’s password. This makes it possible for unauthenticated attackers who trick a logged-in customer (or, with “WP users as customers” enabled, an administrator) into visiting a malicious link to take over their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/df8a8ce0-7258-40ae-bf73-f8c6185fdd16?source=cve - https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/lib/controllers/customer_cabinet_controller.php#L403 - https://wordpress.org/plugins/latepoint/#developers - https://plugins.
ontrollers/customer_cabinet_controller.php#L403 - https://wordpress.org/plugins/latepoint/#developers - https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/latepoint.php - https://plugins.trac.wordpress.org/changeset/3366851/latepoint/tags/5.2.0/lib/controllers/customer_cabinet_controller.php
CVE ID: CVE-2025-7053 State: PUBLISHED Published: 2025-07-04T02:02:05.755Z Last Updated: 2025-07-08T14:09:42.473Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:OF/RC:C) Vendors: n/a Products: Cockpit Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Cockpit up to 2.11.3. It has been rated as problematic. This issue affects some unknown processing of the file /system/users/save. The manipulation of the argument name/email leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.11.4 is able to address this issue. The patch is named bdcd5e3bc651c0839c7eea807f3eb6af856dbc76. It is recommended to upgrade the affected component.
ssue. The patch is named bdcd5e3bc651c0839c7eea807f3eb6af856dbc76. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure and acted very professional. A patch and new release was made available very quickly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314819 - https://vuldb.com/?ctiid.314819 - https://vuldb.com/?submit.605594 - https://github.com/Cockpit-HQ/Cockpit/commit/bdcd5e3bc651c0839c7eea807f3eb6af856dbc76 - https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.11.4
CVE ID: CVE-2025-7054 State: PUBLISHED Published: 2025-08-07T15:19:29.542Z Last Updated: 2025-08-07T15:52:20.008Z Vendors: Cloudflare Products: quiche Problem Types: CWE-835 Description: Cloudflare quiche was discovered to be vulnerable to an infinite loop when sending packets containing RETIRE_CONNECTION_ID frames. QUIC connections possess a set of connection identifiers (IDs); see Section 5.1 of RFC 9000 https://datatracker.ietf.org/doc/html/rfc9000#section-5.1 . Once the QUIC handshake completes, a local endpoint is responsible for issuing and retiring Connection IDs that are used by the remote peer to populate the Destination Connection ID field in packets sent from remote to local. Each
t are used by the remote peer to populate the Destination Connection ID field in packets sent from remote to local. Each Connection ID has a sequence number to ensure synchronization between peers. An unauthenticated remote attacker can exploit this vulnerability by first completing a handshake and then sending a specially-crafted set of frames that trigger a connection ID retirement in the victim. When the victim attempts to send a packet containing RETIRE_CONNECTION_ID frames, Section 19.16 of RFC 9000 https://datatracker.ietf.org/doc/html/rfc9000#section-19.6 requires that the sequence number of the retired connection ID must not be the same as the sequence number of the connection ID use
at the sequence number of the retired connection ID must not be the same as the sequence number of the connection ID used by the packet. In other words, a packet cannot contain a frame that retires itself. In scenarios such as path migration, it is possible for there to be multiple active paths with different active connection IDs that could be used to retire each other. The exploit triggered an unintentional behaviour of a quiche design feature that supports retirement across paths while maintaining full connection ID synchronization, leading to an infinite loop.This issue affects quiche: from 0.15.0 before 0.24.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git
affects quiche: from 0.15.0 before 0.24.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/quiche/security/advisories/GHSA-m3hh-f9gh-74c2
CVE ID: CVE-2025-7056 State: PUBLISHED Published: 2025-07-07T13:57:25.974Z Last Updated: 2025-07-10T23:28:45.730Z Vendors: Wikimedia Foundation Products: Mediawiki - UrlShortener Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394869 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/UrlShortener/+/116626
https://phabricator.wikimedia.org/T394869 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/UrlShortener/+/1166268
CVE ID: CVE-2025-7057 State: PUBLISHED Published: 2025-07-07T15:12:13.202Z Last Updated: 2025-07-10T23:22:18.817Z Vendors: Wikimedia Foundation Products: Mediawiki - Quiz Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Quiz Extension allows Stored XSS.This issue affects Mediawiki - Quiz Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T394612 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Quiz/+/1166274
CVE ID: CVE-2025-7059 State: PUBLISHED Published: 2025-07-09T03:22:03.531Z Last Updated: 2025-07-09T15:58:53.565Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jdegayojr Products: Simple Featured Image Problem Types: CWE-79 Description: The Simple Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slideshow’ parameter in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additi
and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4d4ecc01-7969-4ff6-8210-530835a43dbc?source=cve - https://plugins.trac.wordpress.org/browser/simple-featured-image/trunk/templates/slider.tpl.php#L24 - https://wordpress.org/plugins/simple-featured-image/#developers
CVE ID: CVE-2025-7060 State: PUBLISHED Published: 2025-07-04T11:02:06.164Z Last Updated: 2025-07-07T16:28:46.777Z Severity: N/A (CVSS 4.3 AV:N/AC:H/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: Monitorr Problem Types: CWE-20 Description: A vulnerability was found in Monitorr up to 1.7.6m. It has been classified as problematic. This affects an unknown part of the file assets/config/_installation/mkdbajax.php of the component Installer. The manipulation of the argument datadir leads to improper input validation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to t
complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314835 - https://vuldb.com/?ctiid.314835 - https://vuldb.com/?submit.602080
CVE ID: CVE-2025-7061 State: PUBLISHED Published: 2025-07-04T12:32:04.865Z Last Updated: 2025-07-07T16:23:17.934Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Intelbras Products: InControl Problem Types: CWE-1236, CWE-74 Description: A vulnerability was found in Intelbras InControl up to 2.21.60.9. It has been declared as problematic. This vulnerability affects unknown code of the file /v1/operador/. The manipulation leads to csv injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP
he vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314836 - https://vuldb.com/?ctiid.314836 - https://vuldb.com/?submit.600881
CVE ID: CVE-2025-7063 State: PUBLISHED Published: 2025-09-30T10:03:59.027Z Last Updated: 2025-09-30T19:11:49.226Z Vendors: Polska Akademia Dostępności Products: PAD CMS Problem Types: CWE-434 Description: Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025/
hes for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025/09/CVE-2025-7063
CVE ID: CVE-2025-7065 State: PUBLISHED Published: 2025-09-30T10:04:07.400Z Last Updated: 2025-09-30T19:12:23.081Z Vendors: Polska Akademia Dostępności Products: PAD CMS Problem Types: CWE-434 Description: Due to client-controlled permission check parameter, PAD CMS's photo upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025
ches for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025/09/CVE-2025-7063