high7.2
CVE-2021-35290
File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /admin/main/mod-blog page.
Impact
File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /admin/main/mod-blog page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Balero Cms Project | Balero Cms | Version 0.8.3 |