CVE-2025-8520 | givanz Vvveb up to 1.0.5 Drag-and-Drop Editor editor url server-side request forgery

August 4, 2025 Yanac

A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of the file /vadmin123/?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to server-side request forgery.

This vulnerability was named CVE-2025-8520. The attack can be initiated remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More