Description
Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | cadmium-org/cadmium-cms | <= 0.4.9 | — | GHSA-qx44-p258-3c2v |
Critical · 9.8
CVE-2025-51511
EUVD-2025-204847GHSA-qx44-p258-3c2v
Cadmium CMS has a background arbitrary file upload vulnerability
Published Dec 23, 2025 · Updated Dec 23, 2025 · Assigned by mitre