# CVEs published 2025-05-21

114 CVEs were published on May 21, 2025: 11 critical, 28 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-5059](https://cve.now/CVE-2025-5059.md): Campcodes Online Shopping Portal edit-subcategory.php unrestricted upload (CVSS 5.1, Campcodes Online Shopping Portal)
- [CVE-2025-34025](https://cve.now/CVE-2025-34025.md): Versa Concerto Insecure Docker Mount Container Escape (CVSS 8.6, Versa Concerto)
- [CVE-2025-48070](https://cve.now/CVE-2025-48070.md): Plane has insecure permissions in UserSerializer (CVSS 3.5, makeplane plane)
- [CVE-2025-47947](https://cve.now/CVE-2025-47947.md): ModSecurity Has Possible DoS Vulnerability (CVSS 7.5, owasp-modsecurity ModSecurity)
- [CVE-2025-34026](https://cve.now/CVE-2025-34026.md): Versa Concerto Actuator Authentication Bypass Information Leak (CVSS 9.2, KEV, Versa Concerto)
- [CVE-2025-5057](https://cve.now/CVE-2025-5057.md): Campcodes Online Shopping Portal insert-product.php sql injection (CVSS 6.9, Campcodes Online Shopping Portal)
- [CVE-2025-5056](https://cve.now/CVE-2025-5056.md): Campcodes Online Shopping Portal edit-products.php sql injection (CVSS 6.9, Campcodes Online Shopping Portal)
- [CVE-2025-34027](https://cve.now/CVE-2025-34027.md): Versa Concerto Authentication Bypass File Write Remote Code Execution (CVSS 10.0, Versa Concerto)
- [CVE-2025-47942](https://cve.now/CVE-2025-47942.md): Learners on edX Platform can download python\_lib.zip (CVSS 5.3, openedx edx-platform)
- [CVE-2025-5053](https://cve.now/CVE-2025-5053.md): FreeFloat FTP Server MDIR Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-5052](https://cve.now/CVE-2025-5052.md): FreeFloat FTP Server LS Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-5051](https://cve.now/CVE-2025-5051.md): FreeFloat FTP Server BINARY Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-36535](https://cve.now/CVE-2025-36535.md): AutomationDirect MB-Gateway Missing Authentication for Critical Function (CVSS 10.0, AutomationDirect MB-Gateway)
- [CVE-2025-41426](https://cve.now/CVE-2025-41426.md): Vertiv Liebert RDU101 and UNITY Stack-based Buffer Overflow (CVSS 9.3, Vertiv Liebert RDU101 · Vertiv Liebert IS-UNITY)
- [CVE-2025-46412](https://cve.now/CVE-2025-46412.md): Vertiv Liebert RDU101 and UNITY Authentication Bypass Using an Alternate Path or Channel (CVSS 9.3, Vertiv Liebert RDU101 · Vertiv Liebert IS-UNITY)
- [CVE-2025-5050](https://cve.now/CVE-2025-5050.md): FreeFloat FTP Server BELL Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-5049](https://cve.now/CVE-2025-5049.md): FreeFloat FTP Server APPEND Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-2261](https://cve.now/CVE-2025-2261.md): TIBCO BPM Enterprise XSS Vulnerability (CVSS 7.0, TIBCO Software TIBCO BPM Enterprise)
- [CVE-2025-3751](https://cve.now/CVE-2025-3751.md): TIBCO ActiveMatrix BusinessWorks SQL Injection Vulnerability (CVSS 7.0, TIBCO Software TIBCO ActiveMatrix BusinessWorks)
- [CVE-2025-48069](https://cve.now/CVE-2025-48069.md): ejson2env has insufficient input sanitization (CVSS 6.6, Shopify ejson2env · github.com/Shopify/ejson2env +2)
- [CVE-2025-48064](https://cve.now/CVE-2025-48064.md): GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure (CVSS 3.3, desktop)
- [CVE-2025-48063](https://cve.now/CVE-2025-48063.md): XWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right (CVSS 4.8, xwiki-platform · org.xwiki.platform:xwiki-platform-security…)
- [CVE-2025-48060](https://cve.now/CVE-2025-48060.md): AddressSanitizer: stack-buffer-overflow in jq\_fuzz\_execute (jv\_string\_vfmt) (CVSS 7.7, jqlang jq)
- [CVE-2025-5033](https://cve.now/CVE-2025-5033.md): XiaoBingby TeaCMS addUser cross-site request forgery (CVSS 5.3, XiaoBingby TeaCMS)
- [CVE-2025-47291](https://cve.now/CVE-2025-47291.md): containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. (CVSS 4.6, containerd · github.com/containerd/containerd/v2)
- [CVE-2025-46822](https://cve.now/CVE-2025-46822.md): Unauthenticated Arbitrary File Read via Absolute Path (CVSS 7.7, OsamaTaher Java-springboot-codebase)
- [CVE-2025-2102](https://cve.now/CVE-2025-2102.md): Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.Thi (CVSS 5.7, HYPR Passwordless)
- [CVE-2025-5020](https://cve.now/CVE-2025-5020.md): Links using non-HTTP schemes opened from other apps such as Safari could have allowed spoofing of website addresses (CVSS 4.3, Mozilla Firefox for iOS)
- [CVE-2025-0372](https://cve.now/CVE-2025-0372.md): Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows al (CVSS 5.9, HYPR Passwordless)
- [CVE-2025-5032](https://cve.now/CVE-2025-5032.md): Campcodes Online Shopping Portal edit-category.php sql injection (CVSS 6.9, Campcodes Online Shopping Portal)
- [CVE-2025-5031](https://cve.now/CVE-2025-5031.md): Ackites KillWxapkg wxapkg File Decompression resource consumption (CVSS 2.3, Ackites KillWxapkg · github.com/Ackites/KillWxapkg)
- [CVE-2025-20250](https://cve.now/CVE-2025-20250.md): A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. (CVSS 6.1, Cisco Webex Meetings)
- [CVE-2025-20247](https://cve.now/CVE-2025-20247.md): A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. (CVSS 6.1, Cisco Webex Meetings)
- [CVE-2025-20246](https://cve.now/CVE-2025-20246.md): A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. (CVSS 6.1, Cisco Webex Meetings)
- [CVE-2025-20258](https://cve.now/CVE-2025-20258.md): A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into em (CVSS 5.4, Cisco Duo)
- [CVE-2025-20255](https://cve.now/CVE-2025-20255.md): A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP re (CVSS 4.3, Cisco Webex Meetings)
- [CVE-2025-20242](https://cve.now/CVE-2025-20242.md): A vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE) could allow an unauthenticated, remote attac (CVSS 6.5, Cisco Unified Contact Center Enterprise)
- [CVE-2025-5030](https://cve.now/CVE-2025-5030.md): Ackites KillWxapkg wxapkg File Parser unpack.go processFile os command injection (CVSS 2.3, Ackites KillWxapkg · github.com/Ackites/KillWxapkg)
- [CVE-2025-48012](https://cve.now/CVE-2025-48012.md): One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063 (CVSS 4.8, Drupal One Time Password · drupal/one\_time\_password)
- [CVE-2025-48011](https://cve.now/CVE-2025-48011.md): One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-062 (CVSS 4.8, Drupal One Time Password · drupal/one\_time\_password)
- [CVE-2025-48010](https://cve.now/CVE-2025-48010.md): One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061 (CVSS 4.8, Drupal One Time Password · drupal/one\_time\_password)
- [CVE-2025-48009](https://cve.now/CVE-2025-48009.md): Single Content Sync - Moderately critical - Access bypass - SA-CONTRIB-2025-060 (CVSS 3.1, Drupal Single Content Sync · drupal/single\_content\_sync)
- [CVE-2025-4416](https://cve.now/CVE-2025-4416.md): Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059 (CVSS 7.5, Drupal Events Log Track · drupal/events\_log\_track)
- [CVE-2025-4415](https://cve.now/CVE-2025-4415.md): Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058 (CVSS 4.8, Drupal Piwik PRO · drupal/piwik\_pro)
- [CVE-2025-20267](https://cve.now/CVE-2025-20267.md): Cisco Identity Services Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Identity Services Engine Software)
- [CVE-2025-20257](https://cve.now/CVE-2025-20257.md): Cisco Secure Network Analytics API Authorization Vulnerability (CVSS 6.5, Cisco Secure Network Analytics)
- [CVE-2025-20256](https://cve.now/CVE-2025-20256.md): Cisco Secure Network Analytics Manager Server-Side Template Injection Vulnerability (CVSS 6.5, Cisco Secure Network Analytics)
- [CVE-2025-20113](https://cve.now/CVE-2025-20113.md): Cisco Unified Intelligence Center Privilege Escalation Vulnerability (CVSS 7.1, Cisco Unified Contact Center Express · Cisco Unified Intell…)
- [CVE-2025-20114](https://cve.now/CVE-2025-20114.md): Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability (CVSS 4.3, Cisco Unified Contact Center Express · Cisco Unified Intell…)
- [CVE-2025-20152](https://cve.now/CVE-2025-20152.md): ISE restart (CVSS 8.6, Cisco Identity Services Engine Software)
- [CVE-2025-20112](https://cve.now/CVE-2025-20112.md): Cisco Unified Communications Products Privilege Escalation Vulnerability (CVSS 5.1, Cisco Emergency Responder · Cisco Finesse +7)
- [CVE-2025-4008](https://cve.now/CVE-2025-4008.md): Arbitrary Command Injection in Smartbedded MeteoBridge (CVSS 8.7, KEV, Smartbedded MeteoBridge)
- [CVE-2024-23337](https://cve.now/CVE-2024-23337.md): jq has signed integer overflow in jv.c:jvp\_array\_write (CVSS 4.3, jqlang jq)
- [CVE-2025-5029](https://cve.now/CVE-2025-5029.md): Kingdee Cloud Galaxy Private Cloud BBC System File deleteFileAction.jhtml path traversal (CVSS 5.3, Kingdee Cloud Galaxy Private Cloud BBC System)
- [CVE-2025-1421](https://cve.now/CVE-2025-1421.md): Formula injection in a CSV file in Proget MDM (CVSS 2.4, Proget)
- [CVE-2025-1420](https://cve.now/CVE-2025-1420.md): XSS in Proget MDM (CVSS 2.4, Proget)
- [CVE-2025-1419](https://cve.now/CVE-2025-1419.md): XSS in Proget MDM (CVSS 2.4, Proget)
- [CVE-2025-1418](https://cve.now/CVE-2025-1418.md): Information disclosure in Proget MDM (CVSS 5.1, Proget)
- [CVE-2025-1417](https://cve.now/CVE-2025-1417.md): Information disclosure in Proget MDM (CVSS 4.6, Proget)
- [CVE-2025-1416](https://cve.now/CVE-2025-1416.md): Password disclosure in Proget MDM (CVSS 7.0, Proget)
- [CVE-2025-40775](https://cve.now/CVE-2025-40775.md): DNS message with invalid TSIG causes an assertion failure (CVSS 7.5, ISC BIND)
- [CVE-2025-48417](https://cve.now/CVE-2025-48417.md): Hard-Coded Certificate and Private Key for HTTPS Web Interface in eCharge Hardy Barth cPH2 / cPP2 charging stations (CVSS 6.5, eCharge Hardy Barth cPH2 / cPP2 charging stations)
- [CVE-2025-48416](https://cve.now/CVE-2025-48416.md): Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations (CVSS 8.1, eCharge Hardy Barth cPH2 / cPP2 charging stations)
- [CVE-2025-48415](https://cve.now/CVE-2025-48415.md): Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations (CVSS 6.2, eCharge Hardy Barth cPH2 / cPP2 charging stations)
- [CVE-2025-48414](https://cve.now/CVE-2025-48414.md): Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations (CVSS 6.5, eCharge Hardy Barth cPH2 / cPP2 charging stations)
- [CVE-2025-48413](https://cve.now/CVE-2025-48413.md): Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations (CVSS 7.7, eCharge Hardy Barth cPH2 / cPP2 charging stations)
- [CVE-2025-27804](https://cve.now/CVE-2025-27804.md): OS Command Injection Vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations (CVSS 6.5, eCharge Hardy Barth cPH2 / cPP2 charging stations)
- [CVE-2025-27803](https://cve.now/CVE-2025-27803.md): Missing Authentication in eCharge Hardy Barth cPH2 / cPP2 charging stations (CVSS 6.5, eCharge Hardy Barth cPH2 / cPP2 charging stations)
- [CVE-2025-1415](https://cve.now/CVE-2025-1415.md): Information disclosure in Proget MDM (CVSS 5.1, Proget)
- [CVE-2025-41232](https://cve.now/CVE-2025-41232.md): CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methods (CVSS 9.1, Spring Security · org.springframework.security:spring-se… +1)
- [CVE-2025-4221](https://cve.now/CVE-2025-4221.md): Animated Buttons \<= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, baswaniyash Animated Buttons)
- [CVE-2025-4219](https://cve.now/CVE-2025-4219.md): DPEPress \<= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, darkyudex DPEPress)
- [CVE-2024-12561](https://cve.now/CVE-2024-12561.md): Affiliate Sales in Google Analytics and other tools \<= 2.0.0 - Open Redirect (CVSS 6.1, wecantrack Affiliate Sales in Google Analytics and other to…)
- [CVE-2025-4217](https://cve.now/CVE-2025-4217.md): WP YouTube Video Optimizer \<= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, measuremarketing WP YouTube Video Optimizer)
- [CVE-2025-3750](https://cve.now/CVE-2025-3750.md): Network Posts Extended \<= 7.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via post\_height Parameter (CVSS 6.4, johnzenausa Network Posts Extended)
- [CVE-2025-4105](https://cve.now/CVE-2025-4105.md): Splitit \<= 4.2.8 - Missing Authorization to Multiple Administrative Actions (CVSS 5.4, Splitit)
- [CVE-2025-4611](https://cve.now/CVE-2025-4611.md): Slim SEO \<= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim\_seo\_breadcrumbs Shortcode (CVSS 6.4, rilwis Slim SEO – A Fast & Automated SEO Plugin For WordPre…)
- [CVE-2025-4803](https://cve.now/CVE-2025-4803.md): Glossary by WPPedia \<= 1.3.0 - Authenticated (Administrator+) PHP Object Injection (CVSS 7.2, steinrein Glossary by WPPedia – Best Glossary plugin for Wo…)
- [CVE-2025-3781](https://cve.now/CVE-2025-3781.md): Raisely Donation Form \<= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via raisely\_donation\_form Shortcode (CVSS 6.4, creativefreedomau Raisely Donation Form)
- [CVE-2025-1712](https://cve.now/CVE-2025-1712.md): Arbitrary file write with vcrtrace (CVSS 8.7, Checkmk)
- [CVE-2019-16536](https://cve.now/CVE-2019-16536.md): Stack overflow leading to DoS can be triggered by a malicious authenticated client. (CVSS 8.2, Clickhouse DB)
- [CVE-2021-25262](https://cve.now/CVE-2021-25262.md): Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack. (CVSS 6.9, Yandex Browser)
- [CVE-2021-25255](https://cve.now/CVE-2021-25255.md): Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service. (CVSS 8.3, Yandex Browser Lite)
- [CVE-2021-25254](https://cve.now/CVE-2021-25254.md): Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar. (CVSS 8.2, Yandex Browser Lite)
- [CVE-2025-4949](https://cve.now/CVE-2025-4949.md): XXE vulnerability in Eclipse JGit (CVSS 6.8, Eclipse JGit · org.eclipse.jgit:org.eclipse.jgit)
- [CVE-2025-4524](https://cve.now/CVE-2025-4524.md): Madara – Responsive and modern WordPress theme for manga sites \<= 2.2.2 - Unauthenticated Local File Inclusion (CVSS 9.8, WPStylish Madara – Responsive and modern WordPress theme fo…)
- [CVE-2025-4094](https://cve.now/CVE-2025-4094.md): Digits \< 8.4.6.1 - Auth Bypass via OTP Bruteforcing (CVSS 9.8, DIGITS: WordPress Mobile Number Signup and Login)
- [CVE-2025-4969](https://cve.now/CVE-2025-4969.md): Libsoup: off-by-one out-of-bounds read in find\_boundary() in soup-multipart.c (CVSS 6.5, libsoup · Red Hat Enterprise Linux)
- [CVE-2025-5013](https://cve.now/CVE-2025-5013.md): HkCms Search index.html cross site scripting (CVSS 5.3, HkCms)
- [CVE-2025-5011](https://cve.now/CVE-2025-5011.md): moonlightL hexo-boot Dynamic List Page index.html cross site scripting (CVSS 4.8, moonlightL hexo-boot)
- [CVE-2024-42922](https://cve.now/CVE-2024-42922.md): AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability. (CVSS 6.5)
- [CVE-2024-56428](https://cve.now/CVE-2024-56428.md): The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for th (CVSS 5.5)
- [CVE-2024-56429](https://cve.now/CVE-2024-56429.md): itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to t (CVSS 7.7, itech iLabClient)
- [CVE-2024-57529](https://cve.now/CVE-2024-57529.md): Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code. (CVSS 6.1)
- [CVE-2025-25539](https://cve.now/CVE-2025-25539.md): Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu. (CVSS 6.5)
- [CVE-2025-27558](https://cve.now/CVE-2025-27558.md): IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. (CVSS 9.1)
- [CVE-2025-27997](https://cve.now/CVE-2025-27997.md): An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into (CVSS 8.4)
- [CVE-2025-27998](https://cve.now/CVE-2025-27998.md): An issue in Valvesoftware Steam Client Steam Client 1738026274 allows attackers to escalate privileges via a crafted executable or DLL. (CVSS 8.4)
- [CVE-2025-44040](https://cve.now/CVE-2025-44040.md): An issue in OrangeHRM v.5.7 allows an attacker to escalate privileges via UserService.php and the checkForOldHash function. (CVSS 7.2)
- [CVE-2025-44083](https://cve.now/CVE-2025-44083.md): An issue in D-Link DI-8100 16.07.26A1 allows a remote attacker to bypass administrator login authentication (CVSS 9.8)
- [CVE-2025-44892](https://cve.now/CVE-2025-44892.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web\_rmon\_alarm\_post\_rmon\_alarm funct (CVSS 6.5)
- [CVE-2025-44895](https://cve.now/CVE-2025-44895.md): FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web\_acl\_ipv4BasedAceAdd function. (CVSS 6.5)
- [CVE-2025-45752](https://cve.now/CVE-2025-45752.md): A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functi (CVSS 7.2)
- [CVE-2025-45753](https://cve.now/CVE-2025-45753.md): A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploitin (CVSS 7.2)
- [CVE-2025-45754](https://cve.now/CVE-2025-45754.md): A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32. (CVSS 5.4)
- [CVE-2025-45755](https://cve.now/CVE-2025-45755.md): A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import featu (CVSS 6.1)
- [CVE-2025-48200](https://cve.now/CVE-2025-48200.md): The sr\_feuser\_register extension through 12.4.8 for TYPO3 allows Remote Code Execution. (CVSS 10.0, TYPO3 sr feuser register extension · sjbr/sr-feuser-register)
- [CVE-2025-48201](https://cve.now/CVE-2025-48201.md): The ns\_backup extension through 13.0.0 for TYPO3 has a Predictable Resource Location. (CVSS 8.6, TYPO3 ns backup extension · nitsan/ns-backup)
- [CVE-2025-48202](https://cve.now/CVE-2025-48202.md): The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference. (CVSS 5.3, TYPO3 femanager extension · in2code/femanager)
- [CVE-2025-48203](https://cve.now/CVE-2025-48203.md): The cs\_seo extension through 9.2.0 for TYPO3 allows XSS. (CVSS 6.4, TYPO3 cs seo extension · clickstorm/cs-seo)
- [CVE-2025-48204](https://cve.now/CVE-2025-48204.md): The ns\_backup extension through 13.0.0 for TYPO3 allows command injection. (CVSS 6.8, TYPO3 ns backup extension · nitsan/ns-backup)
- [CVE-2025-48205](https://cve.now/CVE-2025-48205.md): The sr\_feuser\_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference. (CVSS 8.6, TYPO3 sr feuser register extension · sjbr/sr-feuser-register)
- [CVE-2025-48206](https://cve.now/CVE-2025-48206.md): The ns\_backup extension through 13.0.0 for TYPO3 allows XSS. (CVSS 6.1, TYPO3 ns backup extension · nitsan/ns-backup)
- [CVE-2025-48207](https://cve.now/CVE-2025-48207.md): The reint\_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference. (CVSS 8.6, TYPO3 reint downloadmanager extension · renolit/reint-downl…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.