critical9.8
CVE-2021-38243
xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php.
Impact
xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xunruicms | Xunruicms | through 4.5.1 |