Matthewdeaves Willow Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Matthewdeaves Willow Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-12331 — CVSS 4.7 (medium): A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation…
• CVE-2025-12330 — CVSS 2.4 (low): A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add…