CVE-2025-61543 | CraftMyCMS 4.0.2.2 HTTP Header Host password recovery

SecurityVulns
Yanac

A vulnerability marked as problematic has been reported in CraftMyCMS 4.0.2.2. This vulnerability affects unknown code of the component HTTP Header Handler. Performing manipulation of the argument Host results in weak password recovery.

This vulnerability is known as CVE-2025-61543. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More