Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection through the admin/service/run process. An attacker can execute arbitrary code on the server by sending crafted requests. Remediation There is no fixed version for litepubl/cms. References - GitHub Issue...

CVE-2025-29661: Improper Control of Generation of Code

Litepubl CMS = 7.0.9 is vulnerable to RCE in admin/service/run...