Security Advisories - badaso/core - Packagist

badaso/core Security Advisories for 2.4.2 (3)

[HIGH] Badaso CMS file upload vulnerability

PKSA-rkhj-gx6y-ns31 CVE-2025-52353 GHSA-gqp9-jh35-439m

Affected version: <=2.9.11

Reported by:
GitHub
[CRITICAL] Badaso vulnerable to Remote Code Execution (RCE)

PKSA-d235-j48y-gkhn CVE-2022-41705 GHSA-g389-rf5p-fg56

Affected version: <2.7.0

Reported by:
GitHub
[CRITICAL] Badaso vulnerable to Remote Code Execution via malicious file upload

PKSA-hg3f-65tq-yp19 CVE-2022-41711 GHSA-fwvc-9xhj-26v5

Affected version: <2.6.1

Reported by:
GitHub