CVE Catalog

CVE-2025-13576

MediumCVSS 6.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

19th percentile - higher than 19% of all known CVEs

Summary

A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. Multiple endpoints are affected.

Risk Assessment

An unauthorized user may gain access to administrative functions, potentially leading to takeover of the application.

Recommendation

Immediately update or patch the application as the exploit is publicly available; consider restricting access to /admin.php.

Other vulnerabilities in code-projects Blog Site

Original NVD description (English source)

A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. Multiple endpoints are affected.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS