CVE-2026-120349

A security flaw exists in dayrui XunRuiCMS up to version 4.7.4 within the Mobile Site Directory component. The vulnerability is located in the str_replace function of the file /var/www/html/zzmob/index.php, where manipulating the dirname argument leads to code injection . This flaw can be exploit...