CVE-2025-50857

ZenTaoPMS versions v18.11 through v21.6.beta are vulnerable to a Directory Traversal flaw located in the /module/ai/control.php file. This vulnerability is triggered through the file upload functionality, where an attacker can use a specially crafted file upload to achieve arbitrary code executio...