| Package | Affected versions | Patched versions |
|---|---|---|
| classcms | ≤ 2.5 |
Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free