Description
An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.mingsoft:ms-mcms | < 5.4.4 | 5.4.4 | GHSA-3922-2r6r-r4fv |