Uatech Badaso
9 CVEs affecting Uatech Badaso. Latest disclosed: 2025-12-31. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-52353 | Critical | 9.8 | 2025-08-26 | An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP code via t… |
CVE-2022-41705 | Critical | 9.8 | 2022-11-25 | Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does… |
CVE-2022-41711 | Critical | 9.8 | 2022-10-25 | Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does… |
CVE-2023-38970 | Medium | 5.4 | 2023-08-30 | Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of membe… |
CVE-2023-38971 | Medium | 5.4 | 2023-08-29 | Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number p… |
CVE-2023-38969 | Medium | 5.4 | 2023-08-28 | Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter in the new… |
CVE-2023-38974 | Medium | 5.4 | 2023-08-25 | A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via… |
CVE-2023-38973 | Medium | 5.4 | 2023-08-25 | A stored cross-site scripting (XSS) vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a craf… |
CVE-2025-15398 | Low | 3.7 | 2025-12-31 | A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAuthControll… |