| Package | Affected versions | Patched versions |
|---|---|---|
| kreasfero | = 1.5 |
Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free