CVE-2023-34880
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
In cmseasy v7.7.7.7 20230520, a path traversal vulnerability was discovered in the add_action method in lib/admin/language_admin.php. This vulnerability allows attackers to execute arbitrary code and perform local file inclusion.
Risk Assessment
Organizations may be exposed to remote code execution, which can lead to serious security breaches and data loss.
Recommendation
It is recommended to update to the latest version of the software and to monitor systems for potential exploitation attempts.
Original NVD description (English source)
cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion.