CVE-2021-3256

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-06-11

Last modified

2024-08-03

Weaknesses

CWE-88

Affected products

• Kuaifancms (Kuaifan)

References

• https://github.com/poropro/kuaifan/issues/3