CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
File Upload
Cscms
Chshcms
NVD
GitHub
CVSS 3.0
9.8
EPSS
1.5%
An issue is discovered in baijiacms V4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
SQLi
Baijiacms
Baijiacms Project
NVD
GitHub
CVSS 3.0
9.8
EPSS
1.2%