Description
ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload
Critical · 9.8
CVE-2025-50857
EUVD-2025-208123GHSA-253p-9p9w-rg6r
ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitr…
Published Feb 26, 2026 · Updated Feb 26, 2026 · Assigned by mitre