Skip to content
OpenAdvisories

Vendor

Fundacja Widzialni

4 known vulnerabilities.

Products

WidzialniCMS 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-110468 Public exploit

    Remote Code Execution via Unrestricted File Upload in WidzialniCMS

    WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload ar…

    Fundacja Widzialni WidzialniCMS