What’s Vulnerable › Vulnerabilities

CVE-2024-25410

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-02-26 · updated 2026-06-17
• Weakness: CWE-434

Description

flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php.

Affected products

• Flusity: 2.33

References

• https://github.com/flusity/flusity-CMS/commit/b99de3bd05677e8b61c04a70235faa6001556b3b
• https://github.com/flusity/flusity-CMS/issues/9
• https://github.com/flusity/flusity-CMS/commit/b99de3bd05677e8b61c04a70235faa6001556b3b
• https://github.com/flusity/flusity-CMS/issues/9

Get alerted when CVE-2024-25410 or the next vulnerability affects your stack