CVE-2021-35290

Published February 24th, 2023

View on NVD ↗

CVSS v3

7.2

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /admin/main/mod-blog page.

anibalgomezprojects/balerocms-src

Balero CMS's source code

GitHub