Skip to content
OpenAdvisories

Package · Packagist

juzaweb/cms

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-6736

    juzaweb CMS Add New Themes Page install improper authorization

    A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The a…

    juzaweb CMS juzaweb/cms Packagist
  • Medium 6.3
    CVE-2025-6735

    juzaweb CMS Import Page imports improper authorization

    A vulnerability classified as critical has been found in juzaweb CMS 3.4.2. Affected is an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is possible to launch the attack remot…

    juzaweb CMS juzaweb/cms Packagist
  • Medium 4.9
    CVE-2023-46906

    juzawebCMS Incorrect Access Control vulnerability

    juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated.

    juzaweb/cms Packagist