Critical
Froxlor before 2.3.12 Arbitrary File Deletion via Symlink
Type: advisorySource: Official CVE List
Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 (deleteFtpData), queued when an FTP account is deleted, calls FileDir::makeCorrectD…
Products: froxlorCVEs: CVE-2026-100715