📦 Expressionengine

This vulnerability in Expression Engine allows attackers to manipulate file paths through untrusted input, potentially leading to arbitrary file inclusion or remote code execution. It affects Expressi...

This SQL injection vulnerability allows authenticated admin users to execute arbitrary SQL commands through the Structure component. It affects systems where admin users have access to this functional...

This SQL injection vulnerability in ExpressionEngine allows authenticated users with member creation or admin control panel access to execute arbitrary SQL commands. It affects ExpressionEngine versio...

This vulnerability allows authenticated users with translation permissions to inject arbitrary PHP code into language files in ExpressionEngine CMS. Successful exploitation leads to remote code execut...