| Package | Affected versions | Patched versions |
|---|---|---|
| ctcms | ≤ 2.1.2 |
A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free