CVE-2025-0346
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Jan 9, 2025
CWE ID 434
CWE ID 284
Summary
CVE-2025-0346 is a critical vulnerability affecting the Content Management System (CMS) of code-projects version 1.0. This issue lies in the Publish News Page component, specifically the /admin/publishnews.php file. An attacker can exploit this flaw by manipulating the 'image' argument, enabling unrestricted upload. The vulnerability can be triggered remotely, and the exploit has been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Content-Management System