CVE-2025-8518: givanz Vvveb Code Editor code.php save code injection

Published Aug 4, 2025

Updated

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The name of the patch is f684f3e374d04db715730fc4796e102f5ebcacb2. It is recommended to upgrade the affected component.

Affected Software

2 affected components

givanz Vvveb

Vvveb vvveb=1.0.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade givanz Vvveb Code Editor (admin/controller/editor/code.php) to a version that resolves this vulnerability.
Fixed in 1.0.6Patch f684f3e374d04db715730fc4796e102f5ebcacb2

Event History

Aug 4, 2025

CVE Published

via MITRE·05:02 PM

Data Sourced

via MITRE·05:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jun 21, 58473

Event

via NVD·12:46 PM

Frequently Asked Questions

What is the severity of CVE-2025-8518?

CVE-2025-8518 has been rated as critical due to its potential for remote code injection.

How do I fix CVE-2025-8518?

To mitigate CVE-2025-8518, update your givanz Vvveb software to the latest version and apply all recommended security patches.

What component is affected by CVE-2025-8518?

CVE-2025-8518 affects the Code Editor component in the admin/controller/editor/code.php file of givanz Vvveb.

What type of vulnerability is CVE-2025-8518?

CVE-2025-8518 is categorized as a code injection vulnerability.

Can CVE-2025-8518 be exploited remotely?

Yes, CVE-2025-8518 can be exploited remotely, allowing attackers to manipulate the vulnerable code injection functionality.