ExpressionEngine · Report #1093444
PHP Code Injection through "Translate::save()" method
Validstatus
mediumseverity
19upvotes
28 May 2024disclosed
Summary
A vulnerability was identified and fixed that could have allowed attackers to inject and execute arbitrary PHP code through improperly sanitized user input.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.