{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.4.2"}],"component":"juzaweb/cms","cve_ids":["CVE-2025-6735"],"ecosystem":"Packagist","epss":0.00493,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rq7x-cfmc-rq3w","id":"tcs_01M5KF8FZS2F4X8MYY48124D7N","modified_at":"2025-07-11T20:29:42.432133Z","published_at":"2025-06-27T00:31:14Z","references":["https://osv.dev/vulnerability/GHSA-rq7x-cfmc-rq3w","https://nvd.nist.gov/vuln/detail/CVE-2025-6735","https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_make_import.md","https://github.com/juzaweb/cms","https://vuldb.com/?ctiid.314010","https://vuldb.com/?id.314010","https://vuldb.com/?submit.597778"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-rq7x-cfmc-rq3w","url":"https://osv.dev/vulnerability/GHSA-rq7x-cfmc-rq3w"}],"summary":"JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing Import Page component"}