CVE-2025-13576: code-projects Blog Site admin.php improper authorization

Published Nov 24, 2025

Updated

A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. Multiple endpoints are affected.

Affected Software

2 affected components

Code-projects Blog Site

Fabian Blog Site=1.0

Event History

Nov 24, 2025

CVE Published

via MITRE·01:02 AM

Data Sourced

via MITRE·01:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Oct 8, 2026

Event

via NVD·11:38 AM

Frequently Asked Questions

What is the severity of CVE-2025-13576?

CVE-2025-13576 has a high severity due to its potential for improper authorization and remote exploitability.

How do I fix CVE-2025-13576?

To fix CVE-2025-13576, update your Code-projects Blog Site to the latest version that includes a security patch for the vulnerability.

What systems are affected by CVE-2025-13576?

CVE-2025-13576 affects Code-projects Blog Site version 1.0.

Can CVE-2025-13576 be exploited remotely?

Yes, CVE-2025-13576 can be exploited remotely without the need for physical access.

What is the impact of exploiting CVE-2025-13576?

Exploiting CVE-2025-13576 may lead to unauthorized access and manipulation of the Blog Site administration functions.