Skip to content
OpenAdvisories

Package · Packagist

juzaweb/cms

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 6.3
    CVE-2025-6736

    juzaweb CMS Add New Themes Page install improper authorization

    A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The a…

    juzaweb CMS juzaweb/cms Packagist
  • Medium 6.3
    CVE-2025-6735

    juzaweb CMS Import Page imports improper authorization

    A vulnerability classified as critical has been found in juzaweb CMS 3.4.2. Affected is an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is possible to launch the attack remot…

    juzaweb CMS juzaweb/cms Packagist
  • Low 3.5
    CVE-2025-5420

    juzaweb CMS Profile Page upload cross site scripting

    A vulnerability classified as problematic was found in juzaweb CMS up to 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/file-manager/upload of the component Profile Page. The manipulation of the argument Upload leads t…

    juzaweb CMS juzaweb/cms Packagist
  • Medium 4.9
    CVE-2023-46906

    juzawebCMS Incorrect Access Control vulnerability

    juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated.

    juzaweb/cms Packagist
  • High 7.8
    CVE-2023-46468

    juzawebCMS Injection vulnerability

    An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.

    juzaweb/cms Packagist