CVE-2025-57130
An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user, including administrators.
Vendor
Product
CWE
Yayın Tarihi
2025-11-05 16:15:40
Güncelleme
2026-02-02 16:32:11
Source Identifier
cve@mitre.org
KEV Date Added
-