Threats affecting pkg:github/caycon/wolfcms

Wolf CMS versions up to 0.8.3.1 contain a remote code execution vulnerability in the FileManagerController. Authenticated users with the file_manager_mkfile capability can create arbitrary PHP files without proper extension validation. These files can be placed in web-accessible directories and executed via HTTP requests, enabling remote code execution.