← Database

CVE-2026-30285

CRITICAL CVSS: 9.8 Published: 2026-03-31 Modified: 2026-07-24

Description

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Affected Platforms

Zora Zora

Weakness Type

CWE-22

References