CVE-2024-57099: Classcms

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server.

Affected products

• Classcms Classcms: version 4.8 only

Published 2025-02-03. Last modified 2026-06-17.