Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2025-61183

Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar() method of UserBase.php

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Vaahcms Webreinvent
Products
Vaahcms Vaahcms