An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java component

Published Feb 26, 2026 · Updated Feb 26, 2026 · Assigned by mitre