CVE-2025-61183
Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar() method of UserBase.php
Published Updated
PatchFirst · Latest vulnerabilities
webreinvent/vaahcms vulnerabilities
Vulnerabilities published for webreinvent/vaahcms in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
Check your server
Check your installed stack and versions against the current vulnerability feeds.