CVE-2025-29708

SourceCodester Company Website CMS version 1.0 is vulnerable to a file upload vulnerability within the "Create Services" component. The root cause is an improper validation of uploaded files via the /dashboard/Services API endpoint, which could allow for arbitrary file uploads . While no specific...