CVE-2016-5661: Accela Civic Platform Citizen Access Portal

High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.

Affected products

• Accela Civic Platform Citizen Access Portal: affected versions not specified

Published 2016-07-15. Last modified 2026-06-17.