$ 0 0 Ektron CMS version 8.5.0 suffers from unauthenticated file upload and XXE injection vulnerabilities.