CVE-2022-28528

bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-04-26

Last modified

2024-08-03

Weaknesses

CWE-434

Affected products

• Bloofoxcms (Bloofox)

References

• https://github.com/alexlang24/bloofoxCMS/issues/14