CVE-2024-51152 - File Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute arbitrary code via the shell.php a component

HIGH

File Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute arbitrary code via the shell.php a component

Published Nov 8, 2024

7.2

HIGH

CVSS 3.1

EPSS 0.96%

File Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute arbitrary code via the shell.php a component.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
0	affected	<=1.4.7

No remediation recorded yet.

0.96% 0.00961

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 4, 2026.

EPSS probability 0.00961

2024-2026

Table of values (7 key points)

Flat stretches are collapsed. Showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 4, 2026	0.96% (0.00961)	60.28th	v5 (v2026.06.15)
Jun 15, 2026	0.93% (0.00934)	55.95th	v5 (v2026.06.15)
Dec 17, 2025	2.74% (0.02742)	85.51th	v4 (v2025.03.14)
Nov 18, 2025	1.67% (0.01670)	80.60th	v4 (v2025.03.14)
Mar 17, 2025	0.48% (0.00481)	63.09th	v4 (v2025.03.14)
Dec 12, 2024	0.05% (0.00050)	21.21th	v3 (v2023.03.01)
Nov 9, 2024	0.04% (0.00043)	10.00th	v3 (v2023.03.01)