Skip to content
OpenAdvisories

Package · Packagist

kunstmaan/media-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.2
    CVE-2026-104890

    Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution

    Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php performs the blacklisted_extensions check case-sensitively in FileHandler::getFilePath and lowercas…

    Kunstmaan bundles-cms KunstmaanBundlesCMS media-bundle Packagist