CVE-2025-10353
1 advisory.
Packagist/melisplatform/melis-cms-slider CVE-2025-10353: critical
Melis Platform CMS Unauthenticated File Upload Leading to RCE
Action: Upgrade melisplatform/melis-cms-slider to 5.3.1 or later.
composer require melisplatform/melis-cms-slider:5.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.1 | - |
Fixed versions
| 5.3.1 |
Sources
- osv: GHSA-chw4-gjvw-3gxc
- https://nvd.nist.gov/vuln/detail/CVE-2025-10353
- https://github.com/melisplatform/melis-cms-slider/commit/c8757338ccd2dae5d347db5f494922ecc692f614
- https://github.com/ivansmc00/CVE-2025-10353-POC
- https://github.com/melisplatform/melis-cms-slider
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-melis-platform
CVE-2025-10353 · published · modified · JSON