CVE-2024-25414

CVE-2024-25414 affects CSZ CMS v1.3.0, with an arbitrary file upload vulnerability in the /admin/upgrade component. A crafted ZIP file can lead to code execution. The connected PT-2024-20929 entry confirms the vulnerable component and tailors a workaround: temporarily disable the /admin/upgrade f...