CVE-2025-14889CWE-266CWE-285

Campcodes Advanced Voting Management System Password voters_edit.php improper authorization

Medium · published December 18, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0. The impacted element is an unknown function of the file /admin/voters_edit.php of the component Password Handler. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00289 · 20.4th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-285 · Improper Authorization
Published
2025-12-18T20:02Z
EPSS history
Timeline
  • 18 DEC 20:02Z
    Campcodes Advanced Voting Management System Password voters_edit.php improper authorization
    cvelistv5