A vulnerability was found in bg5sbk MiniCMS up to 1.8 and classified as critical. This affects an unknown function of the file /mc-admin/post-edit.php of the component Article Handler. Executing a manipulation can lead to improper authentication.
This vulnerability is registered as CVE-2025-15458. It is possible to launch the attack remotely. Furthermore, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
