Critical · 9.8 CVE-2026-67960 EUVD-2026-60551GHSA-pq26-vh26-f4ph

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentControl…

Published Aug 17, 2026 · Updated Aug 18, 2026 · Assigned by mitre

Description

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components

References

https://github.com/xy-f0/CVE/issues/1#issue-4890245413
https://github.com/user-attachments/files/30816503/PbootCMS-3.2.15URL.Redirection.Vulnerability.docx