The vulnerability CVE-2025-68909 affects blazethemes Blogistic blog software versions up to 1.0.5. It involves unrestricted upload of files with dangerous types, allowing an attacker with low privileges to upload malicious files. This can lead to full compromise of the affected system. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided by the vendor. The vulnerability is publicly disclosed but no known exploits have been reported.

Successful exploitation allows an attacker with limited privileges to upload malicious files, potentially leading to complete system compromise including unauthorized access, data disclosure, data modification, and denial of service. The critical CVSS score of 9.9 reflects the severity and broad impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions, implement strict file type validation, and monitor for suspicious file uploads as interim mitigations.