VYPR
← All advisories
High severity8.8NVD Advisory· Published May 15, 2026· Updated Jun 17, 2026

CVE-2021-47964

CVE-2021-47964

Description

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages through the block manager. Attackers can upload a crafted ZIP file containing PHP code in the packageinfo.inc file and trigger execution by accessing the About tab of the installed extension.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Schlix/CMSllm-create2 versions
    =2.2.6-6+ 1 more
    • (no CPE)range: =2.2.6-6
    • (no CPE)range: =2.2.6-6

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.