critical9.8
CVE-2023-46990
Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace funct…
Impact
Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Publiccms | Publiccms | Version 4.0.202302.e |