CVE-2025-34467

CVE-2025-34467 is a denial-of-service vulnerability affecting ZwiiCMS versions prior to 13.7.00. It allows an authenticated low-privilege user to lock administrative endpoints, preventing legitimate administrators from accessing them, by simply requesting an administrative page. This vulnerability has a CVSS score of 4.3 (MEDIUM), indicating a low impact denial of service that requires authentication but no user interaction. There is currently no public exploit code available, nor is there any evidence of active exploitation or significant community discussion.