{"cvss":9.3,"datePublished":"2026-03-10T00:00:00Z","dateUpdated":"2026-03-10T00:00:00Z","description":"File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm' using the 'mcsdetail_img' parameter.","dueDate":"","id":"CVE-2025-10353","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Melis Platform","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"  Path Equivalence: 'filename....' (Multiple Trailing Dot)","vendor":"Melis Technology"}