CVE-2022-30007

HIGH 7.2CVE-2022-30007 · Published 17/05/2022 · updated 17/06/2026

In short

CVE-2022-30007 is a HIGH (CVSS 7.2) vulnerability affecting gxcms (gxcms project).
Chance of exploitation in the next 30 days (EPSS): 0.98%, higher than 62.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gxcms gxcms_project	`= 1.5`	No fix yet

Description

GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server.

References

ZackSecurity/VulnerReport
breezety/gxcms15 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free