High severity7.5NVD Advisory· Published Sep 30, 2025· Updated Jun 17, 2026

CVE-2025-8117

Description

PAD CMS improperly initializes parameter used for password recovery, which allows to change password for any user that did not use reset password functionality. This issue affects all 3 templates: www, bip and www+bip.

This product is End-Of-Life and producent will not publish patches for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Widzialni/Pad CMS
cpe:2.3:a:widzialni:pad_cms:*:*:*:*:*:*:*:*
Range: <=1.2.1
PAD CMS/PAD CMSllm-fuzzy
Polska Akademia Dostępności/PAD CMSv5
Range: 0

Patches

Vulnerability mechanics

References

cert.pl/posts/2025/09/CVE-2025-7063nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000