CVE-2024-33445

CVE-2024-33445 affects hisiphp v2.0.111. A remote attacker can execute arbitrary code by sending a crafted script to SystemPlugins::mkInfo in SystemPlugins.php. CVSS v3.1 base score 9.8 (CRITICAL): Network, no privileges, no user interaction; confidentiality/integrity/availability all high. Publi...