A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.

Published Jul 7, 2022 · Updated Aug 3, 2024 · Assigned by mitre