Arbitrary File Read

SS.CMS is vulnerable to Arbitrary File Read. The vulnerability exists due to the lack of validation in the ReadTextAsync method which allows an attacker to gain access to files, resulting in Sensitive Information Disclosure...