Polska Akademia Dostępności

Products

ProductCVEsExploitedLatest
PAD CMS9–Sep 30, 2025

Exploited and recent CVEs

  • CVE-2025-8122 High 8.7 Blind SQL Injection in PAD CMS 0.3%
  • CVE-2025-8121 High 8.7 Blind SQL Injection in PAD CMS 0.3%
  • CVE-2025-8120 Critical 10.0 Remote Code Execution via Unrestricted File Upload in PAD CMS 0.6%
  • CVE-2025-8119 Medium 5.1 Cross-Site Request Forgery in PAD CMS 0.1%
  • CVE-2025-8118 Medium 6.9 Bruteforce Protection Bypass in PAD CMS 0.2%
  • CVE-2025-8117 High 8.7 Account Takeover via Reset Password Functionality in PAD CMS 0.3%
  • CVE-2025-8116 Medium 5.1 Reflected XSS in PAD CMS 0.2%
  • CVE-2025-7065 Critical 10.0 Remote Code Execution via Unrestricted File Upload in PAD CMS 0.6%
  • CVE-2025-7063 Critical 10.0 Remote Code Execution via Unrestricted File Upload in PAD CMS 0.6%