← Database

CVE-2021-38243

CRITICAL CVSS: 9.8 Published: 2023-09-27 Modified: 2026-06-17

Description

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request.

Affected Platforms

Xunruicms Xunruicms

Weakness Type

NVD-CWE-noinfo, CWE-94

References