BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within the 'fileurl' parameter.

Published Jun 4, 2021 · Updated Aug 4, 2024 · Assigned by mitre