CVE-2025-1890 | shishuocms 1.1 ManageUpLoadAction.java handleRequest file unrestricted upload

A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload.

This vulnerability was named CVE-2025-1890. The attack can be initiated remotely. Furthermore, there is an exploit available.