74cms <=3.33 is vulnerable to remote code execution (RCE) in the background interface apiadmin.
CWE-77