Description
An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to execute arbitrary code via uploading a crafted svg or xml file.
Critical · 9.8
CVE-2025-25361
EUVD-2025-7669GHSA-r7j7-c9pj-h2v7
An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to ex…
Published Mar 6, 2025 · Updated Mar 7, 2025 · Assigned by mitre