Critical severity9.8NVD Advisory· Published Jun 14, 2022· Updated Jul 5, 2026

CVE-2021-42675

Description

Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kreado/Kreasferodescription
Kreado/Kreasferollm-fuzzy
Range: =1.5

Patches

Vulnerability mechanics

References

twitter.com/1ofThegutHakrs/status/1536246485188128768nvdExploitThird Party Advisory
kreado.comnvdVendor Advisory
kreasfero.comnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000