PT-2025-22107 · Mojoomla · Wpams

·

CVE-2025-39401

·

Published

2025-04-17

·

Updated

2026-09-03

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: mojoomla WPAMS versions prior to 44.0
Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential control of the server.
Recommendations: For versions prior to 44.0, update to a version that includes a fix for this issue, as using older versions poses a significant risk due to the unrestricted file upload vulnerability.

Exploit

Fix

RCE

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-39401

Affected Products

Wpams