| Package | Affected versions | Patched versions |
|---|---|---|
| ctcms | ≤ 2.1.2 |
A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free