CVE-2014-4912: Frog CMS Project Frog CMS

Critical severity, CVSS 9.8. EPSS: 8.1% chance of exploitation in the next 30 days.

An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.

Affected products

• Frog CMS Project Frog CMS: version 0.9.5 only

Published 2018-03-22. Last modified 2026-06-17.