CVE-2018-17125

CVE-2018-17125

CScms 4.1 allows arbitrary directory deletion via a dir=.. substring to pluginssysadminPlugins.php.

Source: CVE-2018-17125