critical9.8
CVE-2024-52677
HkCms <= v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php.
Impact
HkCms <= v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hkcms | Hkcms | through 2.3.2.240702 |