6.9
Medium
CVE-2025-10116 A vulnerability was identified in SiempreCMS up to 1.3.6
Description
A vulnerability was identified in SiempreCMS up to 1.3.6. This vulnerability affects unknown code of the file /docs/admin/file_upload.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SiempreCMS 1.3 | 1.3.0 → 1.3.6 | No fix stated |