Description

Acunetix determined that the Craft CMS is vulnerable to remote code execution.

Remediation

Upgrade to the latest version of Craft CMS

References

Craft CMS Remote Code Execution vulnerability

CraftCMS RCE

Related Vulnerabilities

SAP Hybris Deserialization RCE

WordPress Plugin Subscribe Form Remote Command Execution (1.1)

WordPress Plugin Advanced Access Manager Arbitrary Code Execution (2.8.2)

WordPress Plugin Lightbox Jquery Possible Remote Code Execution (0.24)

WordPress Plugin WP-Live Chat by 3CX Remote Code Execution (7.0.01)

Severity

Critical

Classification

CVE-2023-41892 CWE-94 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Tags

Code Execution