CVE-2025-6736
1 advisory.
Packagist/juzaweb/cms CVE-2025-6736: medium 6.3, EPSS 0.49%
JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing certain components
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.4.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mrph-pjv2-34f4
- https://nvd.nist.gov/vuln/detail/CVE-2025-6736
- https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_upload_new_themes.md
- https://github.com/juzaweb/cms
- https://vuldb.com/?ctiid.314011
- https://vuldb.com/?id.314011
- https://vuldb.com/?submit.597779
CVE-2025-6736 · published · modified · JSON