Webasyst Framework backlink vulnerability

Webasyst Framework versions 4.4.0 and earlier contain a backlink vulnerability. This vulnerability arises because waArchiveTar::writeItem fails to validate the target of links; it creates symbolic links from theme archives. Authenticated users with theme management privileges can upload themes...