CVE-2026-0566

CWE-284 — Improper Access ControlCWE-434 — Unrestricted File Upload3 documents3 sources
Severity
5.1MEDIUM
EPSS
0.1%
top 82.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Code-projects Content Management System
Timeline
PublishedJan 2

Description

A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/edit_posts.php. The manipulation of the argument image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
code-projects Content Management System edit_posts.php unrestricted upload↗2026-01-02
▶
GHSA
GHSA-vpj6-gh53-xhr4: A security vulnerability has been detected in code-projects Content Management System 1↗2026-01-02
▶
CVE-2026-0566 (MEDIUM CVSS 5.1) | A security vulnerability has been d | cvebase.io