Fundacja Widzialni

4 CVEs in 1 Fundacja Widzialni product, including Widzialnicms. Newest: CVE-2026-112205 (2026-11-09). Severity, EPSS and public exploits for each.

Fundacja Widzialni products with known CVEs

ProductCVEs
Widzialnicms4
Fundacja Widzialni CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1122052026-11-09WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and…
CVE-2026-1122042026-11-09WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execu…
CVE-2026-1104692026-11-09WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficien…
CVE-2026-1104682026-11-09WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter…