VYPR
← All advisories
High severity8.3NVD Advisory· Published Nov 5, 2025· Updated Jul 5, 2026

CVE-2025-57130

CVE-2025-57130

Description

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user, including administrators.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • ZwiiCMS/ZwiiCMSllm-fuzzy3 versions
    <=13.6.07+ 2 more
    • (no CPE)range: <=13.6.07
    • (no CPE)
    • cpe:2.3:a:zwiicms:zwiicms:*:*:*:*:*:*:*:*range: <=13.6.07

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.