Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-25361 1 Publiccms 1 Publiccms 2025-07-01 9.8 Critical
An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to execute arbitrary code via uploading a crafted svg or xml file.