Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-31022 EUVD-2024-28940GHSA-7245-x6gq-6qg5

An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component.

Published Apr 8, 2024 · Updated Aug 2, 2024 · Assigned by mitre