CVE-2025-8798 | oitcode samarium up to 0.9.6 Create Product Page /dashboard/product unrestricted upload

A vulnerability was found in oitcode samarium up to 0.9.6. It has been classified as critical. Affected is an unknown function of the file /dashboard/product of the component Create Product Page. The manipulation leads to unrestricted upload.

This vulnerability is traded as CVE-2025-8798. It is possible to launch the attack remotely. Furthermore, there is an exploit available.