BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PDF file.
- https://github.com/bigtreecms/BigTree-CMS/issues/392
No PoCs found on GitHub currently.