A vulnerability, which was classified as critical, has been found in bg5sbk MiniCMS up to 1.8. Impacted is the function
delete_page of the file /minicms/mc-admin/page.php of the component File Recovery Request Handler. This manipulation causes improper authentication.
This vulnerability is tracked as CVE-2025-15455. The attack is possible to be carried out remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
