Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-38243 EUVD-2021-24701GHSA-22vx-3c5q-pcwr

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attac…

Published Sep 26, 2023 · Updated Jun 18, 2025 · Assigned by mitre

Description

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request.

References