Packagist/juzaweb/cms CVE-2025-6735: medium 6.3, EPSS 0.49%
JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing Import Page component
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.4.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rq7x-cfmc-rq3w
- https://nvd.nist.gov/vuln/detail/CVE-2025-6735
- https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_make_import.md
- https://github.com/juzaweb/cms
- https://vuldb.com/?ctiid.314010
- https://vuldb.com/?id.314010
- https://vuldb.com/?submit.597778
CVE-2025-6735 · published · modified · JSON