CVE-2025-65838

Impact

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/Hyperkopite/PublicCMS_Vulns/blob/main/RCE_1.md
• https://github.com/sanluan/PublicCMS
• https://github.com/sanluan/PublicCMS/issues/101
• https://github.com/Hyperkopite/PublicCMS_Vulns/blob/main/RCE_1.md
• https://github.com/sanluan/PublicCMS/issues/101