CVE-2024-7551

Name of the Vulnerable Software and Affected Versions juzaweb CMS versions up to 3.4.2

Description A path traversal issue has been found in the Theme Editor component of juzaweb CMS, affecting an unknown function of the file /admin-cp/theme/editor/default. This issue can be exploited remotely, potentially leading to unauthorized access. The exploit has been disclosed publicly.

Recommendations For versions up to 3.4.2, upgrade to a patched version immediately and review logs for signs of exploit. As a temporary workaround, consider restricting access to the Theme Editor component until a patch is available.