critical9.8
CVE-2025-14532
DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result …
Impact
DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code Execution. This issue was fixed in versions above 5.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Studiofabryka | Dorbycms | from 1.0 through 5.0 |