Posted by Ron E on Sep 03 Description

Flextype CMS contains a remote code execution vulnerability in the

interaction between the Entries API and Shortcodes::registerShortcodes().

The /api/v1/entries endpoint accepts an attacker-controlled entry

identifier that can contain path traversal sequences, allowing content

containing PHP code to be written outside the intended entries directory.

The /api/v1/query endpoint subsequently permits an attacker-controlled path

to reach...