Cadmium Cms
Monthly
Arbitrary file upload in Cadmium CMS 0.4.9 through /admin/content/filemanager/uploads allows an attacker who can reach the back-office content file manager to place a server-side executable file, potentially achieving code execution with high confidentiality, integrity and availability impact. The supplied CVSS score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), but the independent assessment uses PR:L because the /admin/ path indicates an authenticated backend session is likely required; the exact role and whether uploads are web-executable are not stated in the available sources. A public PoC reference exists in the vendor GitHub issue but is not verified as working exploit code; active exploitation is not confirmed in CISA KEV data, EPSS is 0.38% (32nd percentile), and the vuln.today priority is act_now.
Arbitrary file upload in Cadmium CMS 0.4.9 through /admin/content/filemanager/uploads allows an attacker who can reach the back-office content file manager to place a server-side executable file, potentially achieving code execution with high confidentiality, integrity and availability impact. The supplied CVSS score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), but the independent assessment uses PR:L because the /admin/ path indicates an authenticated backend session is likely required; the exact role and whether uploads are web-executable are not stated in the available sources. A public PoC reference exists in the vendor GitHub issue but is not verified as working exploit code; active exploitation is not confirmed in CISA KEV data, EPSS is 0.38% (32nd percentile), and the vuln.today priority is act_now.