CVE-2024-25414

Publication date

2024-02-16 00:00:00

Family

mitre

State

PUBLISHED

Description

An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.