Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

juzaweb/cms

5 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 4 medium
Registry
Packagist

Advisories 5

  • CVE-2025-6736Medium 5.3

    juzaweb CMS Add New Themes Page install improper authorization

    Affected: through 3.4.2.

  • CVE-2025-6735Medium 5.3

    juzaweb CMS Import Page imports improper authorization

    Affected: through 3.4.2.

  • CVE-2025-5420Medium 5.1

    juzaweb CMS Profile Page upload cross site scripting

    Affected: through 3.4.2.

  • CVE-2023-46906Medium 4.9

    juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code.

    Affected: through 3.4.

  • An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.

    Affected: through 3.4.