Loading vulnerability details…
CVSS v3.1
N/A
EPSS
2.83%
Published
Apr 27, 2008
Modified
Jun 16, 2026
Public PoC / Exploit (2)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.
Weaknesses (CWE)
Affected Products (1)
References (12)