Vulnerability Details CVE-2025-61183
Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar() method of UserBase.php
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.3%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2025-61183
-
cpe:2.3:a:webreinvent:vaahcms:2.3.1