Skip to content
5.3 Medium

CVE-2026-4514 A flaw has been found in PbootCMS up to 3.2.12

Description

A flaw has been found in PbootCMS up to 3.2.12. Affected by this issue is some unknown functionality of the file apps/admin/controller/system/UserController.php of the component Backend. Executing a manipulation of the argument Field can lead to improper access controls. The attack may be performed from remote. The exploit has been published and may be used.

Affected products and versions

Product Affected versions Fixed in
PbootCMS 3.2 3.2.0 → 3.2.12 No fix stated
The 13 CVEs of PbootCMS →
Track this CVE