Incomplete Cleanup

CVE-2025-55910

Medium

6.3/10

Summary

CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: LOW
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: LOW
Availability Impact: LOW

CWE-459 - Incomplete Cleanup

The software does not properly "clean up" and remove temporary or supporting resources after they have been used.

References

Advisory Timeline

Published Sep 19, 2025