Skip to content
OpenAdvisories

Product · BuilderEngine

CMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34100 Public exploit

    BuilderEngine 3.5.0 RCE via Unauthenticated Arbitrary File Upload

    An unrestricted file upload vulnerability exists in BuilderEngine 3.5.0 via the integration of the elFinder 2.0 file manager and its use of the jQuery File Upload plugin. The plugin fails to properly validate or restrict file types or locations during upload …

    BuilderEngine CMS