WidzialniCMS vulnerabilities

2 known vulnerabilities in WidzialniCMS from Fundacja Widzialni. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  WidzialniCMS: Unrestricted Upload of File with Dangerous Type

  CVE-2026-110469Nov 9, 2026Fundacja Widzialni

  WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the uploadPath parameter, an unauthenticated attacker can upload arbitrary files to a

• 10.0 Critical severity

  WidzialniCMS: Unrestricted Upload of File with Dangerous Type

  CVE-2026-110468Nov 9, 2026Fundacja Widzialni

  WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload arb