CVE-2026-73328 — Vulnerability intelligence
volmarg — personal-management-system
Published:
- CVSS
- 8.6
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the /upload/send/ endpoint. Attackers can submit base64 fileContent with a .php fileName into the web root and request it to execute code as the web server user.