CVE-2020-12471

Monox CMS 5.1.40.5152 and earlier versions are affected by an insecure deserialization flaw in MonoX components (ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, SilverLightUploadHandler) that enables remote code execution via HTML5Upload.ashx or Pages/SocialNetworki...