Description
Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution.
Unscored
CVE-2016-7095
EUVD-2016-7975GHSA-wj6v-6rhf-6r45
Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprot…
Published Nov 3, 2016 · Updated Aug 6, 2024 · Assigned by mitre