CVE-2024-42523

Description

publiccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaData

Affected Platforms

Weakness Type

CWE-434

References

• https://gist.github.com/ilikeoyt/3dbbca2679c2551eaaeaea9c83acf1a1
• https://gitee.com/sanluan/PublicCMS/issues/IADVDM