VYPR

vaahcms

by vaahcms

CVEs (1)

  • CVE-2025-61183Oct 8, 2025
    risk 0.00cvss epss 0.00

    Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar() method of UserBase.php