VULNERABILITY INTELLIGENCE

CVE-2024-57099

CVSS score9.8 CRITICAL

EPSS probability0.70%

CISA KEVNot currently listed

Published2025-02-03

Last modified2026-06-17

Description

ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server.