CVE-2021-28931

Publication date

2021-07-07 14:01:19

Family

mitre

State

PUBLISHED

Description

Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.