EasyImages2.0 Project EasyImages2.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs

CVE-2025-65474

An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.

Published 2025-12-11 · Analyzed

9.8EPSS 0.005

CVE-2025-65473

An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.

Published 2025-12-11 · Analyzed

9.1EPSS 0.006

CVE-2025-65471

An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted PHP file.

Published 2025-12-11 · Modified

8.8EPSS 0.005

CVE-2025-65472

A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page.

Published 2025-12-11 · Analyzed

8.8EPSS 0.002

CVE-2023-33599

EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php.

Published 2023-05-23 · Modified

6.1EPSS 0.004

CVE-2023-1181

Cross-site Scripting (XSS) - Stored in icret/easyimages2.0

Published 2023-03-05 · Modified

5.4EPSS 0.004

CVE-2025-13415

icret EasyImages SVG Image upload.php cross site scripting