CVE-2024-29368: Mozilo Mozilocms

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the file handling module of moziloCMS v2.0 allows attackers to bypass extension restrictions via file renaming, potentially leading to unauthorized file execution or storage of malicious content.

Affected products

• Mozilo Mozilocms: version 2.0 only

Published 2024-04-22. Last modified 2026-06-17.