← Back

CVE-2025-7014

nvd nist
Published: Jan 29, 2026Modified: Mar 9, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.This issue affects Menu Panel: through 29012026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (1)

Qrmenumpro
1 product
Menu Panel
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Menu Panel
Version 29012026

Related CWEs

CWE-384
Session Fixation
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

References (1)

Source: iletisim@usom.gov.tr
Third Party Advisory

Timeline

No history available yet.