CVE-2026-45616: medium-severity vulnerability in givanz Vvveb
Vvveb: Stored XSS in Posts allows privilege escalation via post editor
Published
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.1epss 0.4%
exploitation probability
0.4%top 68% of all CVEs
observed exploitation
nono source reports it
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, This vulnerability is fixed in 1.0.8.3.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected products
givanz · VvvebRelated CVEs — givanz Vvveb
In the same product, most dangerous first.
CVE-2025-8517MEDIUMgivanz Vvveb session fixiationEPSS 2.2%CVE-2025-8518MEDIUMgivanz Vvveb Code Editor code.php save code injectionEPSS 2.1%CVE-2026-39918CRITICALVvveb < 1.0.8.1 Code Injection via Installation EndpointEPSS 1.1%CVE-2026-41938HIGHVvveb < 1.0.8.2 RCE via Media Upload HandlerEPSS 1.0%CVE-2026-34427HIGHVvveb < 1.0.8.1 Privilege Escalation via admin/user/saveEPSS 1.0%CVE-2026-41934HIGHVvveb < 1.0.8.2 Authenticated RCE via Code EditorEPSS 1.0%