CVE-2025-5424

Name of the Vulnerable Software and Affected Versions juzaweb CMS versions up to 3.4.2

Description A critical issue affects the Media Page component, specifically the file /admin-cp/media, leading to improper access controls. The attack can be initiated remotely. The vendor was contacted about the disclosure but did not respond.

Recommendations For versions up to 3.4.2, as a temporary workaround, consider restricting access to the /admin-cp/media file of the Media Page component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.