VYPR

Soosyze

by Soosyze

Source repositories

CVEs (2)

  • CVE-2025-52392MedAug 13, 2025
    risk 0.38cvss 5.4epss 0.01

    Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability…

  • CVE-2023-53871Dec 15, 2025
    risk 0.00cvss epss 0.01

    Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on…

VYPR — Vulnerability Intelligence