Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.5%	CVE-2025-65471EasyImages · An Arbitrary File Upload High8.8EPSS 0.5%2025-12-11CVE Database V5CVE-2025-65471 An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted PHP file. EPSS 0.5%Vulnerability CWE-434	CVE Database V5	2025-12-11
High	8.8	EPSS 0.2%	CVE-2025-65472EasyImages · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.2%2025-12-11CVE Database V5CVE-2025-65472 A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2025-12-11
Medium	5.1	EPSS 0.2%	CVE-2025-13415icret EasyImages · Cross-site Scripting Medium5.1EPSS 0.2%2025-11-19CVE Database V5CVE-2025-13415 A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely. EPSS 0.2%Vulnerability	CVE Database V5	2025-11-19

Page 1 of 1