CVE-2025-15154EPSS p15.3%
CVE-2025-15154CVE-2025-15154
pbootcms / pbootcms
Description
A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Scoring
| CVSS | 5.3 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
| EPSS | 0.25% probability of exploitation · percentile 15.3% · 2026-10-17T12:00:28Z |
| Last modified | 2026-10-13 |