Description
SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE: the vendor indicates that there was an assumption that the content is "made editable on its own.
Unscored
CVE-2019-11376
EUVD-2019-3054GHSA-gvjh-v5q9-73c3
SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE: the vendor indicat…
Published Apr 20, 2019 · Updated Nov 15, 2024 · Assigned by mitre