Huocms · Huocms · CVE-2025-46080
**Name of the Vulnerable Software and Affected Versions**
HuoCMS version 3.5.1
**Description**
The issue allows an attacker to exploit a flaw and bypass whitelist restrictions, enabling them to craft malicious files with specific suffixes and potentially gain control of the server.
**Recommendations**
For HuoCMS version 3.5.1, consider restricting file upload capabilities until a patch is available, and ensure that only authorized users have access to file upload functions to minimize the risk of exploitation.