The vulnerability of the MediaCMS content management system, related to incorrect authorization, allows a hacker to delete directories in the file system and replace the content of user’s files.

The vulnerability of the MediaCMS content management system is related to incorrect authorization. Exploiting this vulnerability allows a malicious actor to delete directories in the file system and replace the content of user’s files...

CVE-2024-40547

PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace...