← Database

CVE-2021-35290

HIGH CVSS: 7.2 Published: 2023-02-24 Modified: 2026-06-17

Description

File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /admin/main/mod-blog page.

Affected Platforms

Balero Cms Project Balero Cms

Weakness Type

CWE-434

References