Vulnerabilities (CVE)

Filtered by vendor Shishuocms Project Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-1890 1 Shishuocms Project 1 Shishuocms 2025-03-05 6.5 MEDIUM 6.3 MEDIUM
A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.