Skip to content
OpenAdvisories
High · 8.8 CVE-2024-40549 EUVD-2024-38517GHSA-jcc8-9r23-vj32

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute…

Published Jul 12, 2024 · Updated Mar 25, 2025 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file.

References