high7.8
CVE-2023-46468
juzawebCMS Injection vulnerability
Impact
An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | juzaweb/cms | <= 3.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Juzaweb | Juzaweb Cms | through 3.4 |