Contao file-upload command-execution advisory
Contao listed CVE-2024-45398: backend users with file-manager access could upload malicious files and execute them on the server. This required backend access; the advisory is not evidence of a universal public compromise.
Source ↗