Sanity to Insanity: Chaining Public CMS Misconfigurations to Remote Admin Access on Production

From JS Leak to Full Production Compromise: Chaining CMS Misconfigurations to Hijack a Multi-National Backend and its Fortune 500 Partners.