Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-63695

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.