VULNERABILITY INTELLIGENCE

CVE-2021-38243

CVSS score9.8 CRITICAL

EPSS probability1.58%

CISA KEVNot currently listed

Published2023-09-27

Last modified2026-06-17

Description

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request.