CVE-2024-33443

The onethink content management framework (version v.1.1 ) is vulnerable to arbitrary code execution. A remote attacker can exploit the AddonsController.class.php component by sending a crafted script . The root cause is categorized as Improper Control of Generation of Code (CWE-94). To mitigate ...