The vulnerability identified as CVE-2025-62050 affects blazethemes Blogmatic versions up to 1.0.3. It involves an unrestricted file upload flaw that permits uploading files of dangerous types without proper validation or restriction. This can be exploited by an attacker with low privileges to upload malicious files, potentially resulting in full system compromise. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and complete impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to complete compromise of the affected system, including full loss of confidentiality, integrity, and availability. An attacker with limited privileges could upload malicious files that may execute arbitrary code or disrupt service. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict or disable file upload functionality where possible and monitor for suspicious activity related to file uploads. Avoid granting unnecessary privileges to users who can upload files.