Skip to content
OpenAdvisories

Vendor

Fundacja Widzialni

4 known vulnerabilities.

Products

WidzialniCMS 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-112205

    Bruteforce Protection Bypass in WidzialniCMS

    WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and login_timeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login…

    Fundacja Widzialni WidzialniCMS
  • Medium 5.1
    CVE-2026-112204

    Reflected XSS in WidzialniCMS

    WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft. This issue has been fixed in versio…

    Fundacja Widzialni WidzialniCMS