Security Advisory

CVE-2021-47964

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-15 18:36:30

Last updated 2026-05-18 16:02:50

Assigner VulnCheck

CVSS score 8.7

State PUBLISHED

Description

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages through the block manager. Attackers can upload a crafted ZIP file containing PHP code in the packageinfo.inc file and trigger execution by accessing the About tab of the installed extension.

← Browse all CVEs View on cve.org ↗