Vvveb: Security Vulnerabilities
An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism.
CVSS Score
9.8
EPSS Score
0.006
Published
2025-05-12
Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php.
CVSS Score
6.1
EPSS Score
0.001
Published
2024-03-22
Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php.
CVSS Score
6.5
EPSS Score
0.893
Published
2024-03-22