CVE-2026-84063
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused.
| Vendor | d-zero co.,ltd. |
| Product | burgereditor |
| Published | Sep 10, 2026 |
| Last Updated | Sep 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for d-zero co.,ltd. burgereditor
Be the first to know when new medium vulnerabilities affecting d-zero co.,ltd. burgereditor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N Affected Versions
D-ZERO CO.,LTD. / BurgerEditor
3.2.0 through 3.4.0
D-ZERO CO.,LTD. / BurgerEditor
2.28.0 through 2.30.0