Product
Craft CMS versions from 5.10.0 before 5.11.2 contain a remote code execution vulnerability that allows non-administrator control panel users to execute OS commands.