CVE-2022-30821

2022-05-3117:37:25

mitre

www.cve.org

wedding management system

arbitrary file upload

package_edit.php

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

42.9%

JSON

In Wedding Management System v1.0, the editing function of the “Services” module in the background management system has an arbitrary file upload vulnerability in the picture upload point of “package_edit.php” file.

References

github.com/k0xx11/bug_report/blob/main/vendors/codeastro.com/wedding-management-system/RCE-2.md