CVE-2021-25856: Supermicro-CMS Project Supermicro-CMS

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php.

Affected products

• Supermicro-CMS Project Supermicro-CMS: version 3.11 only

Published 2023-08-11. Last modified 2026-06-17.