An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_post.php component.

Published May 1, 2024 · Updated Aug 2, 2024 · Assigned by mitre