BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.

Published Apr 10, 2025 · Updated Apr 10, 2025 · Assigned by mitre