Webreinvent

webreinvent

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-61183 1Webreinvent 1Vaahcms Jun 17, 2026 Oct 8, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar() method of UserBase.php