Cpe:2.3:a:dayrui:xunruicms:*:*:*:*:*:*:*:*

XunRuiCMS versions up to 4.7.4 are vulnerable to code injection via the _get_tpl_content function in the Email Template Rendering component.