← Back to CVE List
CVE-2021-28931
Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt