Critical
Low
Medium
CVE-2025-8118
Overview
PAD CMS implements weak client-side brute-force protection by utilizing two cookies: login_count and login_timeout. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting those cookies. This issue ...
Critical
Low
Medium
No items found.