CVE-2023-3452 - Remote File Inclusion - Remote Code Execution - Unauthenticated

CVE-2021-24145 - Remote Code Execution (Authenticated)