A vulnerability was found in Jspxcms up to 9.5 and classified as problematic. This issue affects some unknown processing of the file /back/UserController.java of the component Request Handler. The manipulation leads to cross-site request forgery.

The identification of this vulnerability is CVE-2025-25772. The attack may be initiated remotely. There is no exploit available.