Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
CuteFlow.org records in CISA KEVNo CuteFlow.org vulnerabilities are listed in CISA KEV.
Priority HIGH 81
CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.02028 · Published 2025-08-08 · No fix listed CWE-434
Open these records in search →