CVE-2025-15109

creationtimestamp| type| source ---|---|--- 2025-12-27 21:55:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115793756779838951 2025-12-27 22:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mayu4jubad2g...

CVE-2025-15109 jackq XCMS upload.php unrestricted upload

A flaw has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. This impacts an unknown function of the file Public/javascripts/admin/plupload-2.1.2/examples/upload.php. This manipulation causes unrestricted upload. It is possible to initiate the attack remotely. The exploit h...