Description
An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.
Critical · 9.8
CVE-2024-25414
EUVD-2024-22745GHSA-2wjg-2258-j35v
An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a craft…
Published Feb 16, 2024 · Updated Mar 14, 2025 · Assigned by mitre