Vulnerabilities

9 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV only Public PoC CVSS ≥ 9 CVSS ≥ 7 EPSS ≥ 10%EPSS ≥ 50%Window24h 7d 30d 90d All

StackAll WordPress E-commerce Drupal Joomla npm pip Maven Go Packagist RubyGems NuGet

Sortpublished epss cvss KEV date updated vendor: ayacms project ✕

CVE	Vulnerability	CVSS	EPSS	Flags	Affected	Exposure	Published
CVE-2022-48116	AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php. AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php. NVD description · AI analysis pending	7.2	1%	PoC	ayacms project ayacms	—	Jan 27, 2023
CVE-2022-47926 +2 in the same advisory: …46102 …46101	AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php NVD description · AI analysis pending	9.8 group max	<1%	PoC	ayacms project ayacms	—	Dec 22, 2022
CVE-2022-45550	AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). NVD description · AI analysis pending	9.8	1%	PoC	ayacms project ayacms	—	Dec 7, 2022
CVE-2022-45548	AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. NVD description · AI analysis pending	8.8	<1%	PoC	ayacms project ayacms	—	Dec 6, 2022
CVE-2022-43074	AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. NVD description · AI analysis pending	9.8	<1%	PoC	ayacms project ayacms	—	Nov 10, 2022
CVE-2021-44238	AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, NVD description · AI analysis pending	7.2	2%	PoC	ayacms project ayacms	—	Mar 1, 2022
CVE-2020-23686	Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts. Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts. NVD description · AI analysis pending	8.8	<1%	PoC	ayacms project ayacms	—	Nov 2, 2021