CVE-2025-10993 MEDIUM

CVE-2025-10993: MuYuCMS Template Management admin.php code injection

Vendor N/A
Product MuYuCMS
Weakness CWE-94 · Code injection
Published September 26, 2025
Last update September 26, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X

What the vulnerability does

01Description

A security flaw has been discovered in MuYuCMS up to 2.7. Affected by this issue is some unknown functionality of the file /admin.php of the component Template Management. The manipulation results in code injection. It is possible to launch the attack remotely.

Key dates

02Disclosure timeline

September 26, 2025 CVE published
September 26, 2025 Record updated