CVE-2025-15148 | CmsEasy up to 7.7.7 Backend Template Management Page template_admin.php savetemp_action content/tempdata code injection

A vulnerability was found in CmsEasy up to 7.7.7 and classified as critical. Affected is the function savetemp_action in the library /lib/admin/template_admin.php of the component Backend Template Management Page. Executing manipulation of the argument content/tempdata can lead to code injection.

The identification of this vulnerability is CVE-2025-15148. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way. If you want to get the best quality for vulnerability data then you always have to consider VulDB.