ThinkPHP "noneCms" contains an unspecified vulnerability that allows for remote code execution through crafted use of the filter parameter.
Source: NVD ↗ · CISA KEV Catalog ↗