← Database

CVE-2021-42675

CRITICAL CVSS: 9.8 Published: 2022-06-14 Modified: 2026-07-09

Description

Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.

Affected Platforms

Kreado Kreasfero

Weakness Type

CWE-434

References