Report a vulnerability.

A person reads every report.

Thanks. A person reads every report.

What helps

Version  php cms --version
Steps    what you did and saw
Impact   what it exposes
Credit   your name, or none

Prefer GitHub?

Send it as a private security advisory.