AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php.
- https://github.com/loadream/AyaCMS/issues/10
- https://github.com/RacerZ-fighting/RacerZ-fighting