Threats tagged 'ghsa-r9m4-crch-98pw'

A code injection vulnerability exists in dayrui XunRuiCMS up to version 4.7.4 in the _get_tpl_content function of the Email Template Rendering component. This vulnerability can be exploited remotely without authentication. Public exploit code is available, and the vendor has not responded to disclosure attempts.