CVE-2021-28931

2021-07-0715:15:08

Google

osv.dev

arbitrary file upload

fork cms 5.9.2

themes panel

file manipulation

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

40.3%

JSON

Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.

References

github.com/bousalman/ForkCMS-arbitrary-upload/blob/main/README.md

github.com/forkcms/forkcms/releases/tag/5.9.2