Known CVE
Craft CMS - Remote Code Execution via Template Path Manipulation
This template identifies a critical Remote Code Execution (RCE) vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the `--templatesPath` query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig templates.
CVE-2024-56145
Critical2024CVSS 9.3CWE-94
cve2024 · rce · craftcms · ssti · kev · vkev · vuln
Verified scans run this check after you prove you own the site.
All known CVEsView the checks catalogNational Vulnerability Database
Scan a website