CVE-2021-35290: Balero CMS Project Balero CMS

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /admin/main/mod-blog page.

Affected products

• Balero CMS Project Balero CMS: version 0.8.3 only

Published 2023-02-24. Last modified 2026-06-17.