LightCMS Remote Code execution (CVE-2021-27112)

A remote code execution vulnerability exists in LightCMS. Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the affected system...

CVE-2021-27112

LightCMS v1.3.5 is affected by a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during external image download. The issue enables arbitrary code execution on successful exploitation, with no exploitation details provided in the sources. Affected product: ...