CVE-2021-35290

File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /admin/main/mod-blog page.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2023-02-24

Last modified

2025-03-12

Weaknesses

CWE-434

Affected products

• Balero Cms (Balero Cms Project)

References

• https://github.com/anibalgomezprojects/balerocms-src/issues/2