Threats tagged 'ghsa-84fq-jfjw-frp9'

A vulnerability in MacCMS Pro up to version 2022.1.3 affects the Plugin Installation Handler component, specifically the install function in /admi.php/admin/addon/add.html. This weakness allows remote attackers with high privileges to perform unrestricted file uploads. Public exploit code is available, but the vendor has not responded to the disclosure. The CVSS score is 4.7, indicating medium severity.