https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15148.htmlhttps://patchthecve.com/cve/CVE-2025-15148.htmlTue, 13 Oct 2026 09:10:00 +0000MEDIUM 4.7: A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetemp_action in the library /lib/admin/template_admin.php of the component Backend Template Management Page. Executing a manipulation of the argument content/tempdata can lead to code injection. The attack may be launched remohttps://patchthecve.com/cve/CVE-2025-11332.htmlhttps://patchthecve.com/cve/CVE-2025-11332.htmlMon, 19 Oct 2026 16:10:00 +0000LOW 3.5: A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHP_SELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been publiclyhttps://patchthecve.com/cve/CVE-2025-55910.htmlhttps://patchthecve.com/cve/CVE-2025-55910.htmlWed, 17 Jun 2026 09:42:15 +0000MEDIUM 6.3: CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php.https://patchthecve.com/cve/CVE-2025-1336.htmlhttps://patchthecve.com/cve/CVE-2025-1336.htmlWed, 17 Jun 2026 08:38:56 +0000MEDIUM 4.3: A vulnerability has been found in CmsEasy 7.7.7.9 and classified as problematic. Affected by this vulnerability is the function deleteimg_action in the library lib/admin/image_admin.php. The manipulation of the argument imgname leads to path traversal. The attack can be launched remotely. The exploihttps://patchthecve.com/cve/CVE-2025-1335.htmlhttps://patchthecve.com/cve/CVE-2025-1335.htmlWed, 17 Jun 2026 08:38:56 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in CmsEasy 7.7.7.9. Affected is the function deleteimg_action in the library lib/admin/file_admin.php. The manipulation of the argument imgname leads to path traversal. It is possible to launch the attack remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-1106.htmlhttps://patchthecve.com/cve/CVE-2025-1106.htmlWed, 17 Jun 2026 08:38:23 +0000MEDIUM 5.4: A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/restore_action in the library lib/admin/database_admin.php. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2025-0973.htmlhttps://patchthecve.com/cve/CVE-2025-0973.htmlWed, 17 Jun 2026 08:27:27 +0000MEDIUM 5.4: A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_action in the library lib/admin/database_admin.php of the file /index.php?case=database&act=backAll&admin_dir=admin&site=default. The manipulation of the argument select[] leads to pa