Medium severity4.7NVD Advisory· Published Dec 29, 2025· Updated Apr 29, 2026
CVE-2025-15197
CVE-2025-15197
Description
A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:anirbandutta:news-buzz:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:anirbandutta:news-buzz:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0
- cpe:2.3:a:code-projects:content_management_system:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- github.com/Limingqian123/CVE/issues/7nvdExploitIssue TrackingThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.