WBCE CMS 1.5.3 has a RCE via admin/languages/install.php.

Vendor Homepage: WBCE/WBCE_CMS: Core package of WBCE CMS. This package includes the core and the default addons. Visit https://wbce.org (DE) or https://wbce-cms.org (EN) to learn more or to join the WBCE CMS community. (github.com) Version: 1.6.1 Tes...