CVE-2025-51511

Critical

Published: 23/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads.

Risk Assessment

The risk includes the possibility of uploading malicious files, potentially leading to code execution on the server, system integrity compromise, and potential takeover of the application.

Recommendation

Immediately restrict access to the admin panel and implement file validation and filtering mechanisms. Consider updating the CMS to the latest version.

Original NVD description (English source)

Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads.