PeepSo Core: File Uploads

PeepSo Core: File Uploads has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (100%).

The one issue recorded for PeepSo Core: File Uploads has a vendor fix available, so running the current release closes it.

All of these findings were reported by Bikram Kharal (themarkib).

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all PeepSo Core: File Uploads vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2024-8988

PeepSo Core: File Uploads <= 6.4.6.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download

Read the full analysis

Vulnerability Records

1 records


2025-05-13 00:00	PeepSo Core: File Uploads <= 6.4.6.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download PeepSo Core <= 6.4.6.0	`CVE-2024-8988`	5.3 Medium	Bikram Kharal (themarkib)	Yes

Showing 1–1 of 1 reports