CVE-2024-44871

High · 7.2

CVSS

7.2

EPSS

16.2%

Published

Sep 10, 2024

CISA due date

—

The record

An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.

Affected packages

Ecosystem	Package	Introduced	Fixed