CVE-2025-5421

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-5421

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5421.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-5421

Published

2025-06-02T00:31:04.139Z

Modified

2026-07-15T01:49:17.997384507Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

juzaweb CMS Plugin Editor Page editor access control

Details

A vulnerability, which was classified as critical, has been found in juzaweb CMS up to 3.4.2. Affected by this issue is some unknown functionality of the file /admin-cp/plugin/editor of the component Plugin Editor Page. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5421.json",
    "cwe_ids": [
        "CWE-266",
        "CWE-284"
    ],
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.4.0"
                },
                {
                    "last_affected": "3.4.0"
                },
                {
                    "introduced": "3.4.1"
                },
                {
                    "last_affected": "3.4.1"
                },
                {
                    "introduced": "3.4.2"
                },
                {
                    "last_affected": "3.4.2"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/juzaweb/cms

Affected ranges

Type

GIT

Repo

https://github.com/juzaweb/cms

Events

Introduced

8df4f9fa8c93133512f8fa7d710b7ecd4bd520ff

Last affected

5c18b5af9fc18a9cca6537bb8b62fb996a33e457

Database specific

{
    "cpe": "cpe:2.3:a:juzaweb:cms:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "3.4"
        },
        {
            "last_affected": "3.4.2"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5421.json"