EIP-2026-111340

The advisory describes a directory traversal and code execution vulnerability in Pligg CMS 2.0.2, where an admin can be tricked via CSRF into saving malicious PHP code to arbitrary files. The PoC demonstrates a traversal attack to overwrite a 404.php file with a PHP payload.