Vulnerability Details CVE-2025-15197
A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.0%
CVSS Severity
CVSS v3 Score 4.7
CVSS v2 Score 5.8
References
Products affected by CVE-2025-15197
-
cpe:2.3:a:anirbandutta:news-buzz:1.0
-
cpe:2.3:a:code-projects:content_management_system:1.0