| Package | Affected versions | Patched versions |
|---|---|---|
| cscms | = 4.1 |
CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free