webreinvent/vaahcms vulnerabilities (Packagist)

1 vulnerability.

• webreinvent/vaahcms Packagist VaahCMS is vulnerable to XSS through its Avatar Upload endpoint CVE-2025-61183 Public exploit 6.1 MediumOctober 8, 2025