Skip to content
Threat Feed

Vendor

Schlix

1 brief RSS
critical advisory

CVE-2021-47964: Schlix CMS Remote Code Execution via Malicious Extension Upload

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability, tracked as CVE-2021-47964, allowing authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages through the block manager and triggering execution by accessing the 'About' tab.

CMS CVE-2021-47964 rce schlix cms php
2r 1t 1c