Threats tagged 'ghsa-cmq8-32v4-qp9h'

A code injection vulnerability exists in codelibs Fess up to version 15.5.1 in the update function of AdminDesignAction.java. This vulnerability allows remote attackers with high privileges to manipulate the content argument, potentially leading to code injection. Public exploit code is available, but no vendor response or patch has been provided.