CVE-2025-10320

Name of the Vulnerable Software and Affected Versions: iteachyou Dreamer CMS versions through 4.1.3.2

Description: A weakness exists in iteachyou Dreamer CMS related to weak password requirements during some unknown processing of the file /admin/user/updatePwd. Remote exploitation is possible, but requires a high degree of complexity and is assessed as difficult. The exploit is publicly available. The vendor was contacted regarding this issue but did not respond.

Recommendations: Update iteachyou Dreamer CMS to a version beyond 4.1.3.2.