Klogserver Klog Server vulnerabilities

• klogserver klog server KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on... CVE-2021-3317 Public exploit EPSS 41.4% 8.8 HighJanuary 26, 2021
• klogserver klog server KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions... CVE-2020-35729 Public exploit EPSS 88.1% 9.8 CriticalDecember 27, 2020