Medium severity5.3OSV Advisory· Published Dec 28, 2025· Updated Jun 17, 2026
CVE-2025-15154
CVE-2025-15154
Description
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3V3.2.10, V3.2.11, V3.2.12, …+ 2 more
- (no CPE)range: V3.2.10, V3.2.11, V3.2.12, …
- cpe:2.3:a:pbootcms:pbootcms:*:*:*:*:*:*:*:*range: <=3.2.12
- (no CPE)range: <=3.2.12
Patches
Vulnerability mechanics
References
4- note-hxlab.wetolink.com/share/JyBNgF8JagWQnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.