CVE-2022-36197 Information

Description

BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PDF file.

Reference

https://github.com/bigtreecms/BigTree-CMS/issues/392