CVE-2025-51511: Cadmium CMS has a background arbitrary file upload vulnerability

December 23, 2025

Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads.

References

github.com/advisories/GHSA-qx44-p258-3c2v
github.com/cadmium-org/cadmium-cms
github.com/cadmium-org/cadmium-cms/issues/23
nvd.nist.gov/vuln/detail/CVE-2025-51511

Code Behaviors & Features

Detect and mitigate CVE-2025-51511 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →