Security Kirby CMS 2.1.0 CSRF / Shell Upload September 16, 2015 007admin Leave a comment Kirby CMS versions 2.1.0 and below suffer from cross site request forgery and remote shell upload vulnerabilities.