PT-2025-31972 · Unknown · Writebot Ai Content Generator Saas React Template

Yucaerin · Published 2025-08-05 · Updated 2025-08-05 · CVE-2025-52078

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Writebot AI Content Generator SaaS React Template versions through 4.0.0

Description A file upload issue exists in Writebot AI Content Generator SaaS React Template. Remote attackers can exploit this to gain escalated privileges by submitting a specially crafted POST request to the /file-upload endpoint. The vulnerability involves uploading malicious files.

Recommendations Update to a version beyond 4.0.0.

Fix

LPE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-52078

Affected Products

Writebot Ai Content Generator Saas React Template

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-52078 · Security Note
• https://github.com/Yucaerin/Writebot · Note
• https://t.me/CVEtracker/29252 · Telegram Post
• https://twitter.com/CVEnew/status/1952817501055951037 · Twitter Post
• https://themeforest.net/item/writebot-ai-content-generator-saas-react-template/53331158?s_rank=9 · Note
• http://writebot.com · Note