CVE-2022-29725

Published June 2nd, 2022

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file.

Creatiwity/wityCMS

Innovative CMS in PHP to easily build a website

GitHub

31