{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.9.11"}],"component":"badaso/core","cve_ids":["CVE-2025-52353"],"ecosystem":"Packagist","epss":0.00651,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-gqp9-jh35-439m","id":"tcs_01M5KF31GB5H55K09MB6XX5MTZ","modified_at":"2025-08-26T22:59:54.595081Z","published_at":"2025-08-26T21:31:07Z","references":["https://osv.dev/vulnerability/GHSA-gqp9-jh35-439m","https://nvd.nist.gov/vuln/detail/CVE-2025-52353","https://github.com/uasoft-indonesia/badaso","https://medium.com/@pat.sanitjairak/remote-code-execution-in-a-plain-view-0f86f183543d"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gqp9-jh35-439m","url":"https://osv.dev/vulnerability/GHSA-gqp9-jh35-439m"},{"source":"nvd","source_id":"CVE-2025-52353","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52353"}],"summary":"Badaso CMS file upload vulnerability"}