Security Advisory

CVE-2025-3800

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-19 11:31:04

Last updated 2025-04-21 14:00:24

Assigner VulDB

CVSS score 6.9

State PUBLISHED

Description

A vulnerability has been found in WCMS 11 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/controllers/AnonymousController.php. The manipulation of the argument mobile_phone leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

← Browse all CVEs View on cve.org ↗