Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

4 matching records.

1. 38
   CVE NVD 2h ago

   WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint.

   WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the uploadPath parameter, an unauthenticated attacker…

   CVSS 10.0 Fix available CVE-2026-110469 Fundacja Widzialni
2. 38
   CVE NVD 2h ago

   WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint.

   WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an…

   CVSS 10.0 Fix available CVE-2026-110468 Fundacja Widzialni
3. 23
   CVE NVD 2h ago

   WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality.

   WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and login_timeout cookies, allowing an unauthenticated attacker to…

   CVSS 6.9 Fix available CVE-2026-112205 Fundacja Widzialni
4. 23
   CVE NVD 2h ago

   WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint.

   WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft. This…

   CVSS 5.1 Fix available CVE-2026-112204 Fundacja Widzialni

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Fundacja+Widzialni&limit=100. RSS for this section: feed.xml.