CVE-2024-52380

Unrestricted Upload of File with Dangerous Type vulnerability in Softpulse Infotech Picsmize allows Upload a Web Shell to a Web Server.This issue affects Picsmize: from n/a through 1.0.0.

CVSS v3.1

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

1.58% chance of exploitation in the next 30 days, 74th percentile

Published

2024-11-14

Updated

2026-04-28

Proof-of-concept exploits (2)

• Nxploited/CVE-2024-52380-Exploit3★ · 2025-01-18
• RandomRobbieBF/CVE-2024-523800★ · 2024-11-25

References

• CVE Record
• NVD entry

Related

• CVE-2024-5238
• CVE-2024-52382
• CVE-2024-52375
• CVE-2024-5239
• CVE-2024-5237
• CVE-2024-5240