CNNVD-202508-252 Information

CNNVD ID

CNNVD-202508-252

Related CVE

CVE-2025-8521

• CNNVD Published: 2025-08-04

Description (Chinese)

Vvveb是Givan个人开发者的一个强大且易于使用的CMS，用于构建网站、博客或电子商务商店。 Vvveb 1.0.5及之前版本存在代码注入漏洞，该漏洞源于容易受到跨站脚本攻击。

Description (English)

Vvveb is a powerful and easy-to-use CMS for Givan personal developers to build a website, blog or e-commerce store. Vvveb 1.5 and previous versions had a code injection loophole, which originated from the vulnerability to cross-site script attacks.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

个人开发者

Published

2025-08-04

Last Modified

2026-02-24

References

https://vuldb.com/?id.318647 https://github.com/givanz/Vvveb/commit/b53c7161da606f512b7efcb392d6ffc708688d49 https://github.com/givanz/Vvveb/releases/tag/1.0.6 https://vuldb.com/?submit.625003 https://hkohi.ca/vulnerability/11 https://vuldb.com/?ctiid.318647 https://access.redhat.com/security/cve/cve-2025-8521 https://nvd.nist.gov/vuln/detail/CVE-2025-8521

Patch

https://github.com/givanz/Vvveb/releases