Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-57099 EUVD-2024-53532GHSA-5rhr-255q-cgmp

ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview param…

Published Feb 3, 2025 · Updated Mar 14, 2025 · Assigned by mitre

Description

ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server.

References