CVE-2018-16352: Weaselcms Project Weaselcms

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used.

Affected products

Published 2018-09-02. Last modified 2026-06-17.