PT-2022-12025

Name of the Vulnerable Software and Affected Versions AyaCMS version 3.1.2 Description The issue allows for Remote Code Execution RCE via the "/aya/module/admin/ust tab e.inc.php" API endpoint. Recommendations For AyaCMS version 3.1.2, as a temporary workaround, consider restricting access to the...