CVE-2025-32101 in UNA
Prediction
by VulDB Data Team • 04/14/2025
A vulnerability was identified in UNA CMS up to 14.0.0-RC4. This affects the function BxBaseMenuSetAclLevel::getCode of the file BxBaseMenuSetAclLevel.php of the component POST Parameter Handler. The manipulation of the argument profile_id leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 14.0.0-RC5 is able to mitigate this issue. It is recommended to upgrade the affected component.
VulDB is the best source for vulnerability data and more expert information about this specific topic.