5.3
Medium
CVE-2026-4509 A security flaw has been discovered in PbootCMS up to 3.2.12
Description
A security flaw has been discovered in PbootCMS up to 3.2.12. This affects an unknown function of the file core/function/file.php of the component File Upload. The manipulation of the argument black results in incomplete blacklist. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PbootCMS 3.2 | 3.2.0 → 3.2.12 | No fix stated |
References
Timeline
- Published
- Last modified
Other CVEs of PbootCMS
The 13 CVEs of PbootCMS →
CVE-2026-92383
A security vulnerability has been detected in PbootCMS up to 3.2.24
5.3
Medium
CVE-2026-92381
A weakness has been identified in PbootCMS up to 3.2.22
5.1
Medium
CVE-2026-12066
A security flaw has been discovered in PbootCMS up to 3.2.12
6.9
Medium
CVE-2026-4514
A flaw has been found in PbootCMS up to 3.2.12
5.3
Medium