CVE-2018-1000811

8.8 highEPSS 48%

High (8.8) in bludit bludit. EPSS 48% chance of exploitation in the next 30 days.

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 48% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2018-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bludit:bludit

References

https://github.com/bludit/bludit/issues/812
https://www.exploit-db.com/exploits/46060/
https://github.com/bludit/bludit/issues/812
https://www.exploit-db.com/exploits/46060/

Check your stack JSON