CVE-2021-27280

OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected

High · published May 8, 2023

CVSS v3.1
7.8
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00973 · 61.7th percentile
Published
2023-05-08T00:00Z
EPSS history
Timeline
  • 08 MAY 00:00Z
    OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected
    cvelistv5