CVE-2024-41454

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file.

Published 2025-01-15. Last modified 2026-06-17.