← Database

CVE-2021-41729

CRITICAL CVSS: 9.1 Published: 2021-09-30 Modified: 2026-06-17

Description

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.

Affected Platforms

Baicloud-Cms Project Baicloud-Cms

Weakness Type

CWE-862

References