CVE-2025-10320 | iteachyou Dreamer CMS up to 4.1.3.2 /admin/user/updatePwd weak password

SecurityVulns
Yanac

A vulnerability identified as critical has been detected in iteachyou Dreamer CMS up to 4.1.3.2. This issue affects some unknown processing of the file /admin/user/updatePwd. Performing manipulation results in weak password requirements.

This vulnerability is known as CVE-2025-10320. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More