Unrated severityNVD Advisory· Published Feb 26, 2025· Updated Mar 3, 2025
CVE-2025-25791
CVE-2025-25791
Description
An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file.
Affected products
2- YZNCMS/YZNCMSdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.