Zwiicms: >> Zwiicms >> 11.5.03 Security Vulnerabilities
An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user, including administrators.
CVSS Score
8.3
EPSS Score
0.004
Published
2025-11-05