Critical · published December 17, 2025
🔥 An authenticated user can exploit a crafted PHP file upload to take control of your Pagekit CMS site! Think of this like a restaurant that allows diners to bring their own ingredients for the chef to cook with — if someone sneaks in spoiled goods, the whole meal (and the restaurant!) could be ruined. In this case, the kitchen (your server) doesn't check what’s being served up! An attacker could upload malicious PHP code, leading to complete control over the server. This means they could steal sensitive data, modify site content, or even bring down the entire system — absolutely devastating!
Think of this like a restaurant that allows diners to bring their own ingredients for the chef to cook with — if someone sneaks in spoiled goods, the whole meal (and the restaurant!) could be ruined. In this case, the kitchen (your server) doesn't check what’s being served up! This vulnerability allows authenticated users to upload arbitrary files through the /storage/poc.php component in Pagekit CMS v1.0.18. If exploited, it can lead to remote code execution, as the server trusts the uploaded PHP files.
An attacker could upload malicious PHP code, leading to complete control over the server. This means they could steal sensitive data, modify site content, or even bring down the entire system — absolutely devastating! Immediate action is required: Update Pagekit CMS to version 1.0.19 or later to patch this vulnerability. Additionally, implement strict file type validation and ensure that only authorized file uploads are permitted. Regularly review user permissions to minimize risk! You've got this! Follow these steps, and you'll be securing your CMS in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| pagekit/pagekit | all versions | — |