NetSight
critical9.8

CVE-2025-52239

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

Impact

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

Affected products

VendorProductAffected versions
ZkeaZkeacms
Version 4.1

Weakness classification

References