TI-2025-28872 CVE-2025-45855 · GHSA-5gr5-vmmr-82g6An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of…Priority LOW 26An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00363 · Published 2025-06-03 · No fix listed CWE-434