CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. See the original NVD description below for full technical details.
CVE
CVE-2025-8117
Severity
HIGH
CVSS
7.5
EPSS
0.25%
Original NVD Description
PAD CMS improperly initializes parameter used for password recovery, which allows to change password for any user that did not use reset password functionality. This issue affects all 3 templates: www, bip and www+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)