CVE-2021-40189

2021-10-1118:27:33

mitre

www.cve.org

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON

PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.

References

github.com/PHPFusion/PHPFusion/issues/2374