CVE-2021-27693: Publiccms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage.

Affected products

• Publiccms Publiccms: before 4.0.202011.b (fixed in 4.0.202011.b)

Published 2022-09-02. Last modified 2026-06-17.