CVE-2022-29725

2022-06-0214:15:50

Google

osv.dev

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.2%

An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file.

CPENameOperatorVersion
witycmseq0.6.0
witycmseq0.6.1
witycmseq0.4.0
witycmseq0.3.0
witycmseq0.6.0-beta1
witycmseq0.6.2
witycmseq0.5.0

Name	Operator	Version
witycms	eq	0.6.0
witycms	eq	0.6.1
witycms	eq	0.4.0
witycms	eq	0.3.0
witycms	eq	0.6.0-beta1
witycms	eq	0.6.2
witycms	eq	0.5.0

References

github.com/Creatiwity/wityCMS/issues/161