DumbWareio DumbDrop

• CVE-2025-47929 Low 2.1 DumbDrop vulnerable to DOM XSS via file upload 0.4%
• CVE-2025-24971 Critical 9.5 OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop 3.1%
• CVE-2025-24891 Critical 9.7 Dumb Drop has an arbitrary file overwrite and path traversal for root shell 0.6%