Vulnerability in Polska Akademia Dostępności Pad Cms

CVE-2025-8117

PAD CMS improperly initializes parameter used for password recovery, which allows to change password for any user that did not use reset password functionality. This issue affects all 3 templates: www, bip and www+bip. This product is End…

EPSS: 0.000 (12.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References