{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.3.1"}],"component":"wpanel/wpanel4-cms","cve_ids":["CVE-2021-34257"],"ecosystem":"Packagist","epss":0.01822,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vhgr-gfx3-fg37","id":"tcs_01M5KF970EBS9XZK4TE8G15WWH","modified_at":"2024-02-20T05:34:08.434267Z","published_at":"2022-04-01T00:00:41Z","references":["https://osv.dev/vulnerability/GHSA-vhgr-gfx3-fg37","https://nvd.nist.gov/vuln/detail/CVE-2021-34257","https://github.com/Sentinal920/WPanel4-Authenticated-RCE","https://github.com/wpanel/wpanel4-cms","https://latestpcsolution.wordpress.com/2021/06/05/wpanel4-cms-authenticated-rce"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-vhgr-gfx3-fg37","url":"https://osv.dev/vulnerability/GHSA-vhgr-gfx3-fg37"}],"summary":"Unrestricted Upload of File with Dangerous Type in WPanel 4"}