HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/file-manager/.
- https://github.com/ttimot24/HorizontCMS/issues/43
No PoCs found on GitHub currently.