An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.

Published Jul 19, 2024 · Updated Mar 27, 2025 · Assigned by mitre