Product by Polska Akademia Dostępności
Pad CMS
9 known vulnerabilities in Pad CMS (Polska Akademia Dostępności), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-7065 | Remote Code Execution via Unrestricted File Upload in PAD CMS | 9.8 | |
| Critical | CVE-2025-7063 | Remote Code Execution via Unrestricted File Upload in PAD CMS | 9.8 | |
| Critical | CVE-2025-8120 | Remote Code Execution via Unrestricted File Upload in PAD CMS | 9.8 | |
| High | CVE-2025-8122 | Blind SQL Injection in PAD CMS | 8.8 | |
| High | CVE-2025-8121 | Blind SQL Injection in PAD CMS | 8.8 | |
| High | CVE-2025-8117 | Account Takeover via Reset Password Functionality in PAD CMS | 7.5 | |
| Medium | CVE-2025-8118 | Bruteforce Protection Bypass in PAD CMS | 6.5 | |
| Medium | CVE-2025-8116 | Reflected XSS in PAD CMS | 6.1 | |
| Medium | CVE-2025-8119 | Cross-Site Request Forgery in PAD CMS | 4.3 |