Filtered by vendor Okay-cms Subscriptions
Filtered by product Okaycms Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-16885 1 Okay-cms 1 Okaycms 2024-08-05 9.8 Critical
In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie. This could happen at two places: first in view/ProductsView.php using the cookie price_filter, and second in api/Comparison.php via the cookie comparison.