← All advisories

High severity8.8OSV Advisory· Published Dec 1, 2025· Updated Jun 17, 2026

CVE-2025-65840

CVE-2025-65840

Description

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Sanluan/PubliccmsOSV2 versions
V2016, V4.0.180707, V4.0.181024, …+ 1 more
- (no CPE)range: V2016, V4.0.180707, V4.0.181024, …
- (no CPE)range: V5.202506.b
Publiccms/Publiccms2 versions
cpe:2.3:a:publiccms:publiccms:5.202506.b:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:publiccms:publiccms:5.202506.b:*:*:*:*:*:*:*
- (no CPE)range: V5.202506.b

Patches

Vulnerability mechanics

References

2

github.com/Hyperkopite/PublicCMS_Vulns/blob/main/CSRF_1.mdnvdExploitThird Party Advisory
github.com/sanluan/PublicCMS/issues/102nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.