PT-2024-24137 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: cmseasy version 7.7.7.9 20240105 Description: The issue allows attackers to delete arbitrary files via a crafted GET request, exploiting a Directory Traversal vulnerability in the lib/admin/image.admin.php file. Recommendations: For cmseasy...