CyberSecBulletin

SiempreCMS vulnerabilities

We track 2 vulnerabilities in SiempreCMS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2025.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest SiempreCMS vulnerabilities

  • 7.3 High severity

    SiempreCMS: Improper Access Control

    CVE-2025-10116SiempreCMS

    A vulnerability was identified in SiempreCMS up to 1.3.6. This vulnerability affects unknown code of the file /docs/admin/file_upload.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available an

  • 7.3 High severity

    SiempreCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component

    CVE-2025-10115SiempreCMS

    A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly d