Files
CVEs-PoC/2021/CVE-2021-27230.md
2025-09-29 21:09:30 +02:00

738 B

CVE-2021-27230

Description

ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save() to write to an _lang.php file under the system/user/language directory.

POC

Reference

Github

No PoCs found on GitHub currently.