CVE-2025-61183 – Vaahcms Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-61183

Published : Oct. 8, 2025, 2:15 p.m. | 21 minutes ago

Description : Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar() method of UserBase.php

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…