CVE

CVE-2021-42675

CVE-2021-42675

Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.

Source: CVE-2021-42675

Exit mobile version