Researchers discovered two critical-severity zero-days in Craft CMS Criminals are allegedly chaining them together to gain ...

Two vulnerabilities impacting Craft CMS were chained together ... This allowed the attacker to install a PHP-based file manager on the server to compromise the system further.

Threat actors have exploited a zero-day vulnerability in Craft CMS to execute PHP code on hundreds of websites.