Lucene search

K
osvGoogleOSV:GHSA-748F-WV76-X9HG
HistorySep 08, 2021 - 5:26 p.m.

Arbitrary file upload in Fork CMS

2021-09-0817:26:26
Google
osv.dev
9
fork cms
arbitrary file upload
vulnerability
themes panel
crafted zip file

EPSS

0.001

Percentile

40.3%

Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.

EPSS

0.001

Percentile

40.3%

Related for OSV:GHSA-748F-WV76-X9HG