CVE-2026-7044 | GreenCMS up to 2.3 index.php?m=admin&c=custom&a=themeadd unrestricted upload

A vulnerability was found in GreenCMS up to 2.3 and classified as critical. Affected is the function themeadd of the file /index.php?m=admin&c=custom&a=themeadd. The manipulation results in unrestricted upload. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as CVE-2026-7044. The attack can be launched remotely. Moreover, an exploit is present.