critical9.8
CVE-2025-51511
Cadmium CMS has a background arbitrary file upload vulnerability
Impact
Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | cadmium-org/cadmium-cms | <= 0.4.9 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cadmium-Cms | Cadmium Cms | Version 0.4.9 |