Vulnerabilities in dripadmin

2 results

CVE-2025-13313CRITICALCRM Memberships <= 2.6 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX EndpointEPSS 0.5%CVE-2025-13312MEDIUMCRM Memberships <= 2.5 - Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX ActionEPSS 0.2%