CVE-2024-28187

SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection via the file upload feature when accessed by an administrator, allowing arbitrary OS commands through specially crafted filenames containing a semicolon (jpegoptim functionality). The vulnerability is patched in version 3....