CVE-2022-26149

MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.

Date published : 2022-02-26

https://github.com/sartlabs/0days/blob/main/Modx/Exploit.txt