CVE-2024-25410

Impact

flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/flusity/flusity-CMS/commit/b99de3bd05677e8b61c04a70235faa6001556b3b
• https://github.com/flusity/flusity-CMS/issues/9
• https://github.com/flusity/flusity-CMS/commit/b99de3bd05677e8b61c04a70235faa6001556b3b
• https://github.com/flusity/flusity-CMS/issues/9