CVE-2025-4305 | kefaming mayi up to 1.3.9 File.php upload File unrestricted upload

A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestricted upload.

This vulnerability was named CVE-2025-4305. The attack can be initiated remotely. Furthermore, there is an exploit available.