Cpe:2.3:a:hortusfox:hortusfox-Web:*:*:*:*:*:*:*:*

HortusFox-Web versions prior to 6.1 are vulnerable to remote code execution allowing authenticated administrators to execute arbitrary OS commands via the Import/Export feature.