CVE-2022-23880

2022-03-2320:09:38

mitre

www.cve.org

arbitrary file upload

file management

taocms v3.0.2

php file

execute arbitrary code

cve-2022-23880

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.

References

github.com/taogogo/taocms/issues/25