CVE-2025-9800

creationtimestamp| type| source ---|---|--- 2025-09-02 01:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxsxzvdltp2a...

CVE-2025-9800

The CVE-2025-9800 entry corresponds to SimStudioAI, where the vulnerability resides in the Import function of the file apps/sim/app/api/files/upload/route.ts within the HTML File Parser component. The root cause is manipulation of the File argument, leading to unrestricted file upload and potenti...