CVE-2026-120348 dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection

A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...