security.nuyts.tech
CVE-2016-9481 – NuytsTech Security
In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments. The method showComments is d