CVE-2021-46204

Taocms v3.0.2 is affected by two vulnerabilities: an arbitrary file read via the path parameter and a SQL injection via taocms\include\Model\Article.php. The root cause is insufficient input filtering/escaping in the affected code paths (Article.php and related file handling). Impact is described...