Description
An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file.
Medium · 4.4
CVE-2025-25791
EUVD-2025-5356GHSA-qxrq-72v2-78jv
An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via u…
Published Feb 26, 2025 · Updated Jul 5, 2026 · Assigned by mitre