CVE-2025-46080

Name of the Vulnerable Software and Affected Versions HuoCMS version 3.5.1

Description The issue allows an attacker to exploit a flaw and bypass whitelist restrictions, enabling them to craft malicious files with specific suffixes and potentially gain control of the server.

Recommendations For HuoCMS version 3.5.1, consider restricting file upload capabilities until a patch is available, and ensure that only authorized users have access to file upload functions to minimize the risk of exploitation.