Vulnerability in Melis Technology Platform
CVE-2025-10353
File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm' using the 'mcsdetail_img' parameter.
EPSS: 0.025 (83.1th percentile) — read the EPSS interpretation.
Affected products
- Melis Technology Platform — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-10353?
- CVE-2025-10353 is a vulnerability in Melis Technology Platform, classified under CWE-43. Published 2025-10-08.
- Is CVE-2025-10353 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.