CVE-2025-65094

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-11-19

Last updated on: 2025-12-15

Assigner: GitHub, Inc.

Description

WBCE CMS is a content management system. Prior to version 1.6.4, a low-privileged user in WBCE CMS can escalate their privileges to the Administrators group by manipulating the groups[] parameter in the /admin/users/save.php request. The UI restricts users to assigning only their existing group, but server-side validation is missing, allowing attackers to overwrite their group membership and obtain full administrative access. This results in a complete compromise of the CMS. This issue has been patched in version 1.6.4.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-19

Last Modified

2025-12-15

Generated

2026-07-06

AI Q&A

2025-11-19

EPSS Evaluated

2026-07-05

NVD

CVE-2025-65094

EUVD

EUVD-2025-198230

Affected Vendors & Products

Vendor	Product	Version / Range
wbce	wbce_cms	to 1.6.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-266	A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability in WBCE CMS allows a low-privileged user to escalate their privileges to the Administrators group by manipulating the groups[] parameter in the /admin/users/save.php request. Although the user interface restricts users to assigning only their existing group, the server-side validation is missing, enabling attackers to overwrite their group membership and gain full administrative access, leading to a complete compromise of the CMS. This issue was fixed in version 1.6.4.

Impact Analysis

An attacker exploiting this vulnerability can gain full administrative access to the WBCE CMS, allowing them to control the entire content management system. This can lead to unauthorized changes, data theft, data loss, or complete system compromise.

Mitigation Strategies

The immediate step to mitigate this vulnerability is to upgrade WBCE CMS to version 1.6.4 or later, where the issue has been patched. Until the upgrade is applied, restrict access to the /admin/users/save.php endpoint to trusted users only to prevent exploitation.

Hi! I’m here to help you understand CVE-2025-65094. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70