CVE-2025-8518

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-8518

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8518.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-8518

Published

2025-08-04T17:02:06.746Z

Modified

2026-07-08T08:12:40.201287186Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

givanz Vvveb Code Editor code.php save code injection

Details

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The name of the patch is f684f3e374d04db715730fc4796e102f5ebcacb2. It is recommended to upgrade the affected component.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8518.json",
    "cwe_ids": [
        "CWE-74",
        "CWE-94"
    ],
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/givanz/vvveb

Affected ranges

Type

GIT

Repo

https://github.com/givanz/vvveb

Events

Introduced

98e38a6a136e284c3df28451096325ef01a4b2e3

Fixed

f684f3e374d04db715730fc4796e102f5ebcacb2

Fixed

3661080b0895bd6346bd90024a887671bdfa49e0

Database specific

{
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:vvveb:vvveb:1.0.5:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.5"
        },
        {
            "last_affected": "1.0.5"
        }
    ]
}

Affected versions

1.*

1.0.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8518.json"