← All advisories

High severity7.5OSV Advisory· Published Dec 1, 2025· Updated Jun 17, 2026

CVE-2025-65838

CVE-2025-65838

Description

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Sanluan/PubliccmsOSV2 versions
V2016, V4.0.180707, V4.0.181024, …+ 1 more
- (no CPE)range: V2016, V4.0.180707, V4.0.181024, …
- (no CPE)range: V5.202506.b
Publiccms/Publiccms2 versions
cpe:2.3:a:publiccms:publiccms:5.202506.b:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:publiccms:publiccms:5.202506.b:*:*:*:*:*:*:*
- (no CPE)range: V5.202506.b

Patches

Vulnerability mechanics

References

2

github.com/Hyperkopite/PublicCMS_Vulns/blob/main/RCE_1.mdnvdExploitThird Party Advisory
github.com/sanluan/PublicCMS/issues/101nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.