baowzh has 4 CVEs on record. The busiest recent month was December 2025 with 4. The median CVSS is 4.8 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.8
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-14522Medium· 6.3A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c35CVE-2025-14520Medium· 5.4A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c30CVE-2025-14521Medium· 4.3A security vulnerability has been detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c24CVE-2025-14519Low· 3.5A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c19
baowzh vulnerabilities
CVEs affecting baowzh, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2025-14522Medium· 6.3A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c
A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The impacted element is an unknown function of the file /Public/Kindeditor/php/upload_json.php. Performing manipulation of the argument imgFile r…
CVE-2025-14521Medium· 4.3A security vulnerability has been detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c
A security vulnerability has been detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The affected element is an unknown function of the file /admin/index.php/datafile/download. Such manipulation of the argument filen…
CVE-2025-14520Medium· 5.4A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c
A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. Impacted is an unknown function of the file /admin/index.php/datafile/delfile. This manipulation of the argument filename causes path traversal…
CVE-2025-14519Low· 3.5A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c
A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. This issue affects some unknown processing of the file /admin/index.php/advtext/add of the component advtext Module. The manipulation resu…