Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-112205

Bruteforce Protection Bypass in WidzialniCMS

WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and login_timeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts. This issue has been fixed in version 2.5.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Fundacja Widzialni
Products
Widzialnicms
CVE-2026-112204

Reflected XSS in WidzialniCMS

WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft. This issue has been fixed in version 2.5.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fundacja Widzialni
Products
Widzialnicms
CVE-2026-110469

Remote Code Execution via Unrestricted File Upload in WidzialniCMS

WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the uploadPath parameter, an unauthenticated attacker can upload arbitrary files to any locations on the server, leading to Remote Code Execution. This issue has been fixed in version 2.5.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Fundacja Widzialni
Products
Widzialnicms
CVE-2026-110468

Remote Code Execution via Unrestricted File Upload in WidzialniCMS

WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload arbitrary files to any locations on the server, leading to Remote Code Execution. This issue has been fixed in version 2.5.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Fundacja Widzialni
Products
Widzialnicms