CVE-2024-31011 Information

Description

Arbitrary file write vulnerability in beescms v.4.0 allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admin_template.php.

Reference

https://github.com/ss122-0ss/beescms/blob/main/readme.md