Vulnerability Details CVE-2021-42675
Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 80.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References