Badaso
1 CVEs
product
Monthly
An arbitrary code execution vulnerability in Badaso CMS 2.9.11. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
File Upload
RCE
Badaso
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.2%
CVE-2025-52353
EPSS 0%
CVSS 9.8
CRITICAL
POC
Act Now
An arbitrary code execution vulnerability in Badaso CMS 2.9.11. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
File Upload
RCE
+1
NVD
GitHub