← Database

CVE-2025-13576

MEDIUM CVSS: 6.3 Published: 2025-11-24 Modified: 2026-06-17

Description

A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. Multiple endpoints are affected.

Affected Platforms

Fabian Blog Site

Weakness Type

CWE-266, CWE-285

References