Vvveb vulnerabilities

Products

• Vvveb 16
• Vvvebjs 7
• Cms 2

Newest

• vvveb cms Vvveb CMS 1.0.8.2 Remote Code Execution via Media Upload CVE-2026-6249 8.7 HighApril 20, 2026
• vvveb cms Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management CVE-2026-6257 9.2 CriticalApril 20, 2026
• vvveb vvvebjs givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload. CVE-2024-27480 9.8 CriticalDecember 29, 2025
• vvveb vvvebjs givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php. CVE-2024-25183 7.5 HighDecember 29, 2025
• vvveb vvvebjs givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php. CVE-2024-25182 9.8 CriticalDecember 29, 2025
• vvveb vvvebjs A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server... CVE-2024-25181 9.1 CriticalDecember 29, 2025
• givanz vvveb givanz Vvveb Code Editor functions.php sanitizeFileName path traversal CVE-2025-12203 5.3 MediumOctober 27, 2025
• givanz vvveb givanz Vvveb Raw SQL import.php import sql injection CVE-2025-11944 5.1 MediumOctober 19, 2025
• givanz vvveb givanz Vvveb cross-site request forgery CVE-2025-11029 5.3 MediumSeptember 26, 2025
• givanz vvveb givanz Vvveb Image information disclosure CVE-2025-11028 6.9 MediumSeptember 26, 2025
• givanz vvveb givanz Vvveb SVG File cross site scripting CVE-2025-11027 4.8 MediumSeptember 26, 2025
• givanz vvveb givanz Vvveb Configuration File information disclosure CVE-2025-11026 5.1 MediumSeptember 26, 2025
• givanz vvveb givanz Vvveb login.tpl cross site scripting CVE-2025-9728 Public exploit 5.3 MediumAugust 31, 2025
• givanz vvveb givanz Vvveb media.php unrestricted upload CVE-2025-9397 5.3 MediumAugust 24, 2025
• givanz vvveb givanz Vvveb Endpoint post cross site scripting CVE-2025-8976 5.1 MediumAugust 14, 2025
• givanz vvveb givanz Vvveb edit.tpl cross site scripting CVE-2025-8975 5.1 MediumAugust 14, 2025
• givanz vvvebjs givanz Vvvebjs node.js save.php path traversal CVE-2025-8522 2.3 LowAugust 4, 2025
• givanz vvveb givanz Vvveb Add Type post-types cross site scripting CVE-2025-8521 4.8 MediumAugust 4, 2025
• givanz vvveb givanz Vvveb Drag-and-Drop Editor editor server-side request forgery CVE-2025-8520 5.1 MediumAugust 4, 2025
• givanz vvveb givanz Vvveb Drag-and-Drop Editor editor information disclosure CVE-2025-8519 5.1 MediumAugust 4, 2025
• givanz vvveb givanz Vvveb Code Editor code.php save code injection CVE-2025-8518 Public exploit 5.1 MediumAugust 4, 2025
• givanz vvveb givanz Vvveb session fixiation CVE-2025-8517 Public exploit 5.3 MediumAugust 4, 2025
• vvveb An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin... CVE-2025-44022 9.8 CriticalMay 12, 2025
• givanz vvvebjs VvvebJs Arbitrary File Upload vulnerability CVE-2024-29272 Public exploitFix available 6.5 MediumMarch 22, 2024
• givanz vvvebjs VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability CVE-2024-29271 Fix available 6.1 MediumMarch 22, 2024