CVE-2021-26786

The CVE-2021-26786 entry relates to PlayTube (customercentric-selling-poland), a PHP-based video platform. Affected component: config.php handling of purchase code. Root cause: a code injection/remote code execution path allows an authenticated attacker to execute arbitrary code via the purchase ...