VULNERABILITY INTELLIGENCE

CVE-2024-40545

CVSS score8.8 HIGH

EPSS probability0.66%

CISA KEVNot currently listed

Published2024-07-12

Last modified2026-06-17

Description

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file.