AI Score
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.
github.com/hapa3/cms/blob/main/1.md