Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

badaso/core

3 known vulnerabilities (3 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 critical
Registry
Packagist

Advisories 3

  • CVE-2025-52353Critical 9.8

    An arbitrary code execution vulnerability in Badaso CMS 2.9.11.

    Affected: through 2.9.11.

  • CVE-2022-41705Critical 9.8

    Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server.

    Affected: fixed in 2.7.0.

  • CVE-2022-41711Critical 9.8

    Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server.

    Affected: fixed in 2.6.1.