CVE-2022-23880

2022-03-2321:15:07

Google

osv.dev

7.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.2%

JSON

An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.

CPENameOperatorVersion
taocmseq3.0.1
taocmseq3.0.2

CPE	Name	Operator	Version
	taocms	eq	3.0.1
	taocms	eq	3.0.2

References

github.com/taogogo/taocms/issues/25