A vulnerability has been found in bg5sbk MiniCMS up to 1.8 and classified as critical. The impacted element is an unknown function of the file /minicms/mc-admin/post.php of the component Trash File Restore Handler. Performing a manipulation results in improper authentication.
This vulnerability is cataloged as CVE-2025-15457. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
The vendor was contacted early about this disclosure but did not respond in any way.
