PatchTheCVEtorrahclef vulnerabilities
Recent CVEs affecting torrahclef products. 5 tracked.
torrahclef has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-23. Highest priority: CVE-2025-29709 (score 57/100).
- CVE-2025-13560 HIGH 7.3 DOWNGRADE A vulnerability was found in SourceCodester Company Website CMS 1.0
- CVE-2025-13561 HIGH 7.3 DOWNGRADE A vulnerability was determined in SourceCodester Company Website CMS 1.0
- CVE-2025-29710 MEDIUM 6.1 DOWNGRADE SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.
- CVE-2025-29709 CRITICAL 9.8 DOWNGRADE SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashbo
- CVE-2025-29708 CRITICAL 9.8 DOWNGRADE SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /da
FAQ
How do I fix torrahclef vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is torrahclef being exploited right now?
None of the tracked torrahclef CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which torrahclef CVE should I patch first?
CVE-2025-29709 currently ranks highest (57/100): SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashbo.