CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution via /aya/module/admin/ust_tab_e.inc.php. The underlying issue is improper filtering of certain elements on that admin page, leading to RCE. Attack vector is network and no user interaction required per CVSS 3.1 (base score 7.2, HIGH). No explici...