Fundacja Widzialni Widzialnicms
4 CVEs affecting Fundacja Widzialni Widzialnicms. Latest disclosed: 2026-11-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-112205 | | 2026-11-09 | WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and… | |
CVE-2026-112204 | | 2026-11-09 | WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execu… | |
CVE-2026-110469 | | 2026-11-09 | WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficien… | |
CVE-2026-110468 | | 2026-11-09 | WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter… |