CVE-2021-36532

PoC —

CVSS 3.1

8.1 high

EPSS

<1%p54

Published

Feb 3, 2023 (Feb 3, 2023)

Modified

Jun 17, 2026

Description

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.

Vendors: portfoliocms project
Products: portfoliocms
Weakness: CWE-362
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.