Lucene search

K
osvGoogleOSV:GHSA-2F6R-892P-69G5
HistoryMay 13, 2022 - 1:43 a.m.

GeniXCMS arbitrary PHP code execution

2022-05-1301:43:29
Google
osv.dev
5
genixcms
install themes
php code execution
zip archive
software security

AI Score

7.4

Confidence

High

EPSS

0.003

Percentile

69.8%

In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.

AI Score

7.4

Confidence

High

EPSS

0.003

Percentile

69.8%

Related for OSV:GHSA-2F6R-892P-69G5