CVE-2026-44977 | Countly Server up to 24.05.49/25.03.43 Star Rating Plugin api.js uploadFeedbackFile unrestricted upload

October 16, 2026 Yanac

A vulnerability was found in Countly Server up to 24.05.49/25.03.43. It has been rated as problematic. This issue affects the function uploadFeedbackFile of the file plugins/star-rating/api/api.js of the component Star Rating Plugin. The manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2026-44977. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More