CVE-2022-30037

XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2023-03-23

Last modified

2025-02-25

Weaknesses

CWE-829

Affected products

• Xunruicms (Xunruicms)

References

• https://weltolk.github.io/p/xunruicms-v4.3.3-to-v4.5.1-backstage-code-injection-vulnerabilityfile-write-and-file-inclus…