CVE-2025-46000: Simogeo Filemanager

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2.5.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.

Affected products

• Simogeo Filemanager: up to and including 2.5.0

Published 2025-07-18. Last modified 2026-06-17.