Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Webreinvent
Webreinvent vulnerabilities
Products
Vaahcms
2
Newest
webreinvent
vaahcms
VaahCMS 2.0.0 - 2.3.4 Malicious JavaScript Supply Chain via security-otp.blade.php
CVE-2026-67595
Public exploit
9.2
Critical
July 29, 2026
webreinvent
vaahcms
VaahCMS is vulnerable to XSS through its Avatar Upload endpoint
CVE-2025-61183
Public exploit
6.1
Medium
October 8, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open