Security Advisory
CVE-2025-57130
8.3
HIGH
Vulnerability Description
An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and modify the profile data of any other user, including administrators.
Published Date
November 5, 2025
Official Source
NIST NVD Advisory