An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_post.php component.Referenceshttps://github.com/summerwayace/cms/blob/main/1.md