CVE-2025-67164

Pagekit CMS version 1.0.18 is vulnerable to an authenticated arbitrary file upload vulnerability within the /storage/poc.php component. This flaw allows an authenticated attacker to upload a crafted PHP file, leading to arbitrary code execution . To remediate this, users should update to a newer ...