CVE-2025-25791

Description

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file.

References

https://github.com/Ka7arotto/YZNCMS/blob/main/yzncms-upload.md

https://gitee.com/ken678/YZNCMS

http://yzncms.com

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS