high8.8
CVE-2021-28931
Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file upl…
Impact
Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fork-Cms | Fork Cms | Version 5.9.2 |