CVE-2021-40238

Webuzo CVE-2021-40238 is an XSS in the admin panel prior to version 2.9.0 that can be triggered by an HTTP request to a non-existent page when administrators view the Error Log. This vulnerability enables unauthenticated remote code execution via the Cron Jobs functionality. Official remediation ...