CVE-2018-14334

CRITICAL 9.8CVE-2018-14334 · Published 17/07/2018 · updated 17/06/2026

In short

CVE-2018-14334 is a CRITICAL (CVSS 9.8) vulnerability affecting joyplus-cms (joyplus-cms project).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
joyplus-cms joyplus-cms_project	`= 1.6.0`	No fix yet

Description

manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766.

References

joyplus/joyplus-cms · Exploit

More vulnerabilities in joyplus-cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free