medium4.3
CVE-2025-29150
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.
Impact
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bluecms Project | Bluecms | Version 1.6 |