Juzaweb
Juzaweb CMS: vulnerabilities and CVEs
Juzaweb CMS has 16 published vulnerabilities, 1 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.
CVEs16
Last 12 months1
Critical0
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-36358 | Medium (5.4) | 0.34% | — | May 6, 2026 | Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function |
| CVE-2025-6736 | Low (2.1) | 0.49% | — | Jun 27, 2025 | A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The… |
| CVE-2025-6735 | Low (2.1) | 0.49% | — | Jun 27, 2025 | A vulnerability classified as critical has been found in juzaweb CMS 3.4.2. Affected is an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization.… |
| CVE-2025-5429 | Medium (5.3) | 0.43% | — | Jun 2, 2025 | A vulnerability classified as critical was found in juzaweb CMS up to 3.4.2. This vulnerability affects unknown code of the file /admin-cp/plugin/install of the component Plugins Page. The manipulation leads to improper… |
| CVE-2025-5428 | Medium (5.3) | 0.43% | — | Jun 2, 2025 | A vulnerability classified as critical has been found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/log-viewer of the component Error Logs Page. The manipulation leads to improper access… |
| CVE-2025-5427 | Medium (5.3) | 0.43% | — | Jun 2, 2025 | A vulnerability was found in juzaweb CMS up to 3.4.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin-cp/permalinks of the component Permalinks Page. The… |
| CVE-2025-5426 | Medium (5.3) | 0.43% | — | Jun 2, 2025 | A vulnerability was found in juzaweb CMS up to 3.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin-cp/menus of the component Menu Page. The manipulation… |
| CVE-2025-5425 | Medium (5.3) | 0.44% | — | Jun 2, 2025 | A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as critical. Affected is an unknown function of the file /admin-cp/theme/editor/default of the component Theme Editor Page. The manipulation… |
| CVE-2025-5424 | Medium (5.3) | 0.50% | — | Jun 2, 2025 | A vulnerability was found in juzaweb CMS up to 3.4.2 and classified as critical. This issue affects some unknown processing of the file /admin-cp/media of the component Media Page. The manipulation leads to improper… |
| CVE-2025-5423 | Medium (5.3) | 0.43% | — | Jun 2, 2025 | A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The… |
| CVE-2025-5422 | Medium (5.3) | 0.47% | — | Jun 2, 2025 | A vulnerability, which was classified as problematic, was found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/logs/email of the component Email Logs Page. The manipulation leads to… |
| CVE-2025-5421 | Medium (5.3) | 0.43% | — | Jun 2, 2025 | A vulnerability, which was classified as critical, has been found in juzaweb CMS up to 3.4.2. Affected by this issue is some unknown functionality of the file /admin-cp/plugin/editor of the component Plugin Editor Page.… |
| CVE-2025-5420 | Medium (5.1) | 0.34% | — | Jun 2, 2025 | A vulnerability classified as problematic was found in juzaweb CMS up to 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/file-manager/upload of the component Profile Page. The… |
| CVE-2024-7551 | Medium (5.1) | 0.88% | — | Aug 6, 2024 | A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as problematic. Affected is an unknown function of the file /admin-cp/theme/editor/default of the component Theme Editor. The manipulation… |
| CVE-2023-46906 | Medium (4.9) | 0.69% | — | Jan 9, 2024 | juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated. |
| CVE-2023-46467 | Medium (5.4) | 0.50% | — | Oct 28, 2023 | Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page. |