iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution.

Published Feb 4, 2022 · Updated Aug 4, 2024 · Assigned by mitre