critical9.8
CVE-2021-42675
Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory.
Impact
Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kreado | Kreasfero | Version 1.5 |