LOW3.5Packagist
GHSA-49rr-34j5-r8mw· CVE-2025-5420juzaweb CMS allows cross-site scripting by uploading an SVG file
Modified: 6/18/2025
package
Packagist/juzaweb/cms
pkg:packagist/juzaweb/cms
MEDIUM4.9Packagist
GHSA-93p6-9cxv-5rpq· CVE-2023-46906juzawebCMS Incorrect Access Control vulnerability
Modified: 4/17/2025
HIGH7.8Packagist
GHSA-h92m-4g9m-72vr· CVE-2023-46468juzawebCMS Injection vulnerability
Modified: 2/16/2024
MEDIUM6.3Packagist
GHSA-mrph-pjv2-34f4· CVE-2025-6736JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing certain components
Modified: 7/11/2025
MEDIUM6.3Packagist
GHSA-rq7x-cfmc-rq3w· CVE-2025-6735JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing Import Page component
Modified: 7/11/2025