cbcvebase.

Xerte Online Toolkits vulnerabilities

1 known vulnerability affecting xerte/xerte_online_toolkits.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-32985P2CRITICALCVSS 9.8PoC≤ 3.142026-03-20
CVE-2026-32985 [CRITICAL] CWE-306 CVE-2026-32985: Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vul Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote attackers to execute arbitrary code by uploading a crafted ZIP archive containing malicious PHP payloads. Attackers can bypass authentication checks in the import.php file to upload
nvd
Xerte Online Toolkits vulnerabilities | cvebase