Security Advisory
CVE-2021-28998
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file.