Security Advisory
CVE-2021-41729
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.