critical9.1
CVE-2021-41729
BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/pps…
Impact
BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Baicloud-Cms Project | Baicloud-Cms | Version 2.5.7 |