CVE-2022-23048
Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload it, the PHP file will be placed at "themes/simpletheme/{rce}.php" from where can be accessed in order to execute commands.
- Score
- CVSS 3.1 7.2 High
- Status
- Modified - help@fluidattacks.com
- Published
- 2022-02-09
- Last modified
- 2024-08-03
- Weaknesses
- CWE-434
Affected products
References
- https://exponentcms.lighthouseapp.com/projects/61783/tickets/1460
- https://fluidattacks.com/advisories/dylan/
- https://github.com/exponentcms/exponent-cms/issues/1546
