critical9.8
CVE-2021-27112
LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images.
Impact
LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lightcms Project | Lightcms | Version 1.3.5 |