CVE-2020-21523

Summary: CVE-2020-21523 is a Server-Side Freemarker template injection in halo CMS v1.1.3, occurring in the Edit Theme File function. The issue allows editing the Freemarker template file and can lead to arbitrary code execution when rendered. The provided descriptions include an example payload ...