CVE-2025-7949 Sanluan PublicCMS preview.html redirect

Medium 5.1 Published 22 Jul 2025 Updated 22 Jul 2025

Attackers can redirect users to malicious sites via the preview.html URL parameter in PublicCMS, requiring a patch to mitigate.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2025-7949?

CVE-2025-7949 is a medium-severity vulnerability in Sanluan PublicCMS, published on 22 Jul 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

A vulnerability was found in Sanluan PublicCMS up to 5.202506.a. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file publiccms-parent/publiccms/src/main/resources/templates/admin/cmsDiy/preview.html. The manipulation of the argument url leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named c1e79f124e3f4c458315d908ed7dee06f9f12a76/f1af17af004ca9345c6fe4d5936d87d008d26e75. It is recommended to apply a patch to fix this issue.

Weakness: CWE-601

Which versions are affected by CVE-2025-7949?

It affects 1 product.

Products include Publiccms Publiccms.

How do I fix CVE-2025-7949?

No fix has been published for CVE-2025-7949 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-7949 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-7949 exists.

Sources

Also known as GHSA-rmjh-hr29-qjfc.