Vulnerability in N/a

CVE-2026-30993

Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php. This vulnerability is exploitable via a crafted input.

EPSS: 0.004 (61.8th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References