CVE-2026-54507 | givanz Vvveb up to 1.0.8.4 oEmbed Proxy editor.php oEmbedProxy url server-side request forgery

September 17, 2026 Yanac

A vulnerability, which was classified as problematic, was found in givanz Vvveb up to 1.0.8.4. This impacts the function oEmbedProxy of the file admin/controller/editor/editor.php of the component oEmbed Proxy. The manipulation of the argument url results in server-side request forgery.

This vulnerability is reported as CVE-2026-54507. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More