CVE-2025-29709: Torrahclef Company Website CMS

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio.

Affected products

• Torrahclef Company Website CMS: version 1.0 only

Published 2025-04-16. Last modified 2026-06-17.