← Back to browse · API

CVE-2025-69770

Severity
CRITICAL
CVSS
10.0
EPSS
0.00628
Risk score
40.22
CISA KEV
No
PoC
No
Published
2026-02-13
Modified
2026-02-13
First seen
2026-08-07
Aliases
EUVD-2025-206963, GHSA-4GG4-26Q8-WV28
Products
n/a:n/a n/a
Sources
euvd EUVD-2025-206963

Description

A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allows attackers to execute arbitrary commands via uploading a crafted zip file.

References