This vulnerability in DeDeCMS 3 affects an unknown functionality within the file /include/dialog/select_media_post.php. By manipulating the uploadfile parameter, an attacker can perform an unrestricted file upload remotely. This could potentially allow the attacker to upload malicious files to the server. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. Exploit code has been published, but there is no vendor advisory or patch information available at this time.

The unrestricted file upload vulnerability allows remote attackers to upload arbitrary files to the affected system. This could lead to further compromise depending on the uploaded file's nature and the server's configuration. However, the CVSS score and vector indicate limited impact with low privileges required and no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict access to the vulnerable functionality, implement strict file upload validation, and monitor for suspicious upload activity.