https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15148.htmlhttps://patchthecve.com/cve/CVE-2025-15148.htmlTue, 13 Oct 2026 09:10:00 +0000MEDIUM 4.7: A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetemp_action in the library /lib/admin/template_admin.php of the component Backend Template Management Page. Executing a manipulation of the argument content/tempdata can lead to code injection. The attack may be launched remohttps://patchthecve.com/cve/CVE-2025-11332.htmlhttps://patchthecve.com/cve/CVE-2025-11332.htmlMon, 19 Oct 2026 16:10:00 +0000LOW 3.5: A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHP_SELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been publiclyhttps://patchthecve.com/cve/CVE-2025-55910.htmlhttps://patchthecve.com/cve/CVE-2025-55910.htmlWed, 17 Jun 2026 09:42:15 +0000MEDIUM 6.3: CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php.https://patchthecve.com/cve/CVE-2025-1336.htmlhttps://patchthecve.com/cve/CVE-2025-1336.htmlWed, 17 Jun 2026 08:38:56 +0000MEDIUM 4.3: A vulnerability has been found in CmsEasy 7.7.7.9 and classified as problematic. Affected by this vulnerability is the function deleteimg_action in the library lib/admin/image_admin.php. The manipulation of the argument imgname leads to path traversal. The attack can be launched remotely. The exploihttps://patchthecve.com/cve/CVE-2025-1335.htmlhttps://patchthecve.com/cve/CVE-2025-1335.htmlWed, 17 Jun 2026 08:38:56 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in CmsEasy 7.7.7.9. Affected is the function deleteimg_action in the library lib/admin/file_admin.php. The manipulation of the argument imgname leads to path traversal. It is possible to launch the attack remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-1106.htmlhttps://patchthecve.com/cve/CVE-2025-1106.htmlWed, 17 Jun 2026 08:38:23 +0000MEDIUM 5.4: A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/restore_action in the library lib/admin/database_admin.php. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2025-0973.htmlhttps://patchthecve.com/cve/CVE-2025-0973.htmlWed, 17 Jun 2026 08:27:27 +0000MEDIUM 5.4: A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_action in the library lib/admin/database_admin.php of the file /index.php?case=database&act=backAll&admin_dir=admin&site=default. The manipulation of the argument select[] leads to pahttps://patchthecve.com/cve/CVE-2024-34315.htmlhttps://patchthecve.com/cve/CVE-2024-34315.htmlWed, 17 Jun 2026 07:33:10 +0000HIGH 7.5: CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action method of /admin/template_admin.php. This vulnerability allows attackers to read arbitrary files.https://patchthecve.com/cve/CVE-2024-34314.htmlhttps://patchthecve.com/cve/CVE-2024-34314.htmlWed, 17 Jun 2026 07:33:10 +0000MEDIUM 4.9: CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fetch_action method of /admin/template_admin.php. This vulnerability allows attackers to read arbitrary files.https://patchthecve.com/cve/CVE-2024-31551.htmlhttps://patchthecve.com/cve/CVE-2024-31551.htmlWed, 17 Jun 2026 07:28:35 +0000HIGH 7.5: Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request.https://patchthecve.com/cve/CVE-2024-32163.htmlhttps://patchthecve.com/cve/CVE-2024-32163.htmlWed, 17 Jun 2026 07:29:22 +0000MEDIUM 6.4: CMSeasy 7.7.7.9 is vulnerable to code execution.https://patchthecve.com/cve/CVE-2024-32162.htmlhttps://patchthecve.com/cve/CVE-2024-32162.htmlThu, 09 Jul 2026 01:19:01 +0000MEDIUM 4.3: CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.https://patchthecve.com/cve/CVE-2024-25828.htmlhttps://patchthecve.com/cve/CVE-2024-25828.htmlWed, 17 Jun 2026 07:16:34 +0000MEDIUM 4.9: cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php.