5.3
Medium
CVE-2025-2978 A vulnerability was found in WCMS 11
Description
A vulnerability was found in WCMS 11. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php?articleadmin/upload/?&CKEditor=container&CKEditorFuncNum=1 of the component Article Publishing Page. The manipulation of the argument Upload leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WCMS | 11 | No fix stated |
Other CVEs of WCMS
The 6 CVEs of WCMS →
CVE-2025-5149
A vulnerability was found in WCMS up to 8.3.11
6.3
Medium
CVE-2025-3800
A vulnerability has been found in WCMS 11 and classified as critical
6.9
Medium
CVE-2025-3799
A vulnerability, which was classified as critical, was found in WCMS 11
6.9
Medium
CVE-2025-3798
A vulnerability, which was classified as critical, has been found in WCMS 11
5.1
Medium