CVE-2022-30007

GXCMS V1.5 is affected by a file upload vulnerability in the background template management page. An attacker can edit templates, rename to a PHP suffix file, and trigger PHP execution to gain server control. Remediation details are not consistently provided across sources; one entry suggests tem...