Threats affecting pkg:github/defaultfuction/Content-Management-System

CVE-2026-5333 is a command injection vulnerability in DefaultFuction Content-Management-System version 1.0. It occurs due to improper handling of the 'host' argument in the /admin/tools.php file, allowing remote attackers to execute arbitrary commands. The vulnerability has a medium severity with a CVSS 4.0 base score of 6.9. Although the exploit code has been publicly released, there are no confirmed reports of exploitation in the wild. No official patch or remediation guidance is currently available from the vendor.