CVE-2025-22389

A medium-severity vulnerability exists in Optimizely EPiServer.CMS.Core versions prior to 12.32.0 due to insufficient validation of uploaded files. This flaw allows the upload of potentially malicious file types, such as .docm and .html . If accessed by application users, these files can be lever...