[ Vendor · 5 CVEs ]
vtenext
CVEs affecting vtenext published in the last 30 days, plus any vtenext CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-71455 | 4 Nov 2026 | CVSS 5.3 | vtenextvtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch… | |
| CVE-2025-71456 | 4 Nov 2026 | CVSS 8.1 | vtenextvtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted… | |
| CVE-2025-71457 | 4 Nov 2026 | CVSS 9.8 | vtenextvtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via… | |
| CVE-2025-71453 | 4 Nov 2026 | CVSS 6.1 | vtenextvtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php that echoes unsanitized… | |
| CVE-2025-71454 | 4 Nov 2026 | CVSS 6.5 | vtenextvtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in include/utils/VteCsrf.php skips __csrf_token… |