https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-6736.htmlhttps://patchthecve.com/cve/CVE-2025-6736.htmlWed, 17 Jun 2026 10:02:28 +0000MEDIUM 6.3: A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The attack can be launched remotely. The explohttps://patchthecve.com/cve/CVE-2025-6735.htmlhttps://patchthecve.com/cve/CVE-2025-6735.htmlWed, 17 Jun 2026 10:02:28 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in juzaweb CMS 3.4.2. Affected is an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to thhttps://patchthecve.com/cve/CVE-2025-5429.htmlhttps://patchthecve.com/cve/CVE-2025-5429.htmlWed, 17 Jun 2026 09:47:54 +0000MEDIUM 6.3: A vulnerability classified as critical was found in juzaweb CMS up to 3.4.2. This vulnerability affects unknown code of the file /admin-cp/plugin/install of the component Plugins Page. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2025-5428.htmlhttps://patchthecve.com/cve/CVE-2025-5428.htmlWed, 17 Jun 2026 09:47:54 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/log-viewer of the component Error Logs Page. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-5427.htmlhttps://patchthecve.com/cve/CVE-2025-5427.htmlWed, 17 Jun 2026 09:47:54 +0000MEDIUM 6.3: A vulnerability was found in juzaweb CMS up to 3.4.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin-cp/permalinks of the component Permalinks Page. The manipulation leads to improper access controls. The attack may be launched remotely. The exhttps://patchthecve.com/cve/CVE-2025-5426.htmlhttps://patchthecve.com/cve/CVE-2025-5426.htmlWed, 17 Jun 2026 09:47:53 +0000MEDIUM 6.3: A vulnerability was found in juzaweb CMS up to 3.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin-cp/menus of the component Menu Page. The manipulation leads to improper access controls. The attack can be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-5425.htmlhttps://patchthecve.com/cve/CVE-2025-5425.htmlWed, 17 Jun 2026 09:47:53 +0000MEDIUM 6.3: A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as critical. Affected is an unknown function of the file /admin-cp/theme/editor/default of the component Theme Editor Page. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Thttps://patchthecve.com/cve/CVE-2025-5424.htmlhttps://patchthecve.com/cve/CVE-2025-5424.htmlWed, 17 Jun 2026 09:47:53 +0000MEDIUM 6.3: A vulnerability was found in juzaweb CMS up to 3.4.2 and classified as critical. This issue affects some unknown processing of the file /admin-cp/media of the component Media Page. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosehttps://patchthecve.com/cve/CVE-2025-5423.htmlhttps://patchthecve.com/cve/CVE-2025-5423.htmlWed, 17 Jun 2026 09:47:53 +0000MEDIUM 6.3: A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotely. https://patchthecve.com/cve/CVE-2025-5422.htmlhttps://patchthecve.com/cve/CVE-2025-5422.htmlWed, 17 Jun 2026 09:47:53 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/logs/email of the component Email Logs Page. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-5421.htmlhttps://patchthecve.com/cve/CVE-2025-5421.htmlWed, 17 Jun 2026 09:47:53 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in juzaweb CMS up to 3.4.2. Affected by this issue is some unknown functionality of the file /admin-cp/plugin/editor of the component Plugin Editor Page. The manipulation leads to improper access controls. The attack may be launched rhttps://patchthecve.com/cve/CVE-2025-5420.htmlhttps://patchthecve.com/cve/CVE-2025-5420.htmlWed, 17 Jun 2026 09:47:53 +0000LOW 3.5: A vulnerability classified as problematic was found in juzaweb CMS up to 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/file-manager/upload of the component Profile Page. The manipulation of the argument Upload leads to cross site scripting. The attack can behttps://patchthecve.com/cve/CVE-2024-7551.htmlhttps://patchthecve.com/cve/CVE-2024-7551.htmlWed, 17 Jun 2026 08:20:25 +0000LOW 2.7: A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as problematic. Affected is an unknown function of the file /admin-cp/theme/editor/default of the component Theme Editor. The manipulation leads to path traversal. It is possible to launch the attack remotely. The exploit h