PT-2025-43670 · Unknown · Microweber Cms

Published 2025-10-24 · Updated 2025-10-28 · CVE-2025-60954

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Microweber CMS version 2.0

Description The application does not enforce minimum password length or complexity during password resets. This allows users to set weak passwords, including single-character passwords, potentially leading to account compromise, including administrative accounts.

Recommendations Apply a strong password policy that enforces minimum length and complexity requirements for all user accounts.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2025-60954

Affected Products

Microweber Cms

References · 9

• 🔥 https://github.com/progprnv/CVE-Reports/blob/main/CVE-2025-60954 · Exploit
• 🔥 https://gist.github.com/progprnv/feae2b76f2db0cb2ac6e14b1bf7d8646 · Exploit
• https://osv.dev/vulnerability/CVE-2025-60954 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60954 · Security Note
• https://github.com/microweber/microweber · Note
• https://twitter.com/CVEnew/status/1981821939703296392 · Twitter Post
• https://twitter.com/CveTodo/status/1983097772447293708 · Twitter Post
• https://t.me/CVEtracker/35714 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1981863292961165451 · Twitter Post