Remote Code Execution in Yakamara Media Redaxo CMS 5.12.1 via Malicious PHP Code in Modules

Remote Code Execution in Yakamara Media Redaxo CMS 5.12.1 via Malicious PHP Code in Modules

CVE-2021-39459 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code.

Learn more about our Cms Pen Testing.