PatchTheCVEcompany website cms vulnerabilities and fixes
Recent CVEs affecting company website cms, with upgrade or downgrade steps. 5 tracked.
Also searched as: companywebsitecms.
company website cms has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-23. Highest priority: CVE-2025-29709 (score 57/100).
- CVE-2025-13560 HIGH 7.3 DOWNGRADE A vulnerability was found in SourceCodester Company Website CMS 1.0
- CVE-2025-13561 HIGH 7.3 DOWNGRADE A vulnerability was determined in SourceCodester Company Website CMS 1.0
- CVE-2025-29710 MEDIUM 6.1 DOWNGRADE SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.
- CVE-2025-29709 CRITICAL 9.8 DOWNGRADE SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashbo
- CVE-2025-29708 CRITICAL 9.8 DOWNGRADE SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /da
FAQ
How do I fix company website cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is company website cms being exploited right now?
None of the tracked company website cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which company website cms CVE should I patch first?
CVE-2025-29709 currently ranks highest (57/100): SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashbo.