critical9.8
CVE-2019-13187
The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.p…
Impact
The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symphonyextensions | Rich Text Formatter | through 1.1.1 |