CVE-2021-36581

—

CVSS 3.1

9.8 critical

EPSS

1%p71

Published

Sep 14, 2021 (Sep 14, 2021)

Modified

Jul 9, 2026

Description

Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.

Vendors: kooboo
Products: kooboo cms
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.