The vulnerability resides in the catchimage method of the Public/ueditor/php/controller.php file in the light0011 CMS. By manipulating the source[] parameter, an attacker can force the server to fetch arbitrary URLs, leading to a server‑side request forgery. The exploit can be launched remotely and has already been made publicly available, indicating that malicious actors can readily use it. This type of flaw is categorized as CWE‑918, a network‑based SSRF weakness that can compromise confidentiality and facilitate further compromise.

All installations of the light0011 CMS are potentially impacted because the project follows a rolling release model and no specific affected or fixed versions have been published. Thus any version of the CMS that has not applied a vendor patch remains vulnerable.

With a CVSS score of 6.9 the vulnerability carries a moderate severity. The EPSS score is not available, but the existence of a public exploit and the lack of a KEV listing do not diminish the risk; an attacker can execute SSRF against the CMS from anywhere on the internet. Successful exploitation could allow external web resources to be fetched by the CMS, leaking internal IPs, credentials, or loading malicious payloads. The risk is highest for systems exposed to the internet without adequate outbound request filtering.