CVE-2021-26794: Frogcms Project Frogcms

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.

Affected products

• Frogcms Project Frogcms: version 0.9.5 only

Published 2021-09-23. Last modified 2026-06-17.