CVE-2022-44087

CriticalCVSS 9.8

Published: 10/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.48%

71th percentile - higher than 71% of all known CVEs

Summary

ESPCMS P8.21120101 contains a remote code execution (RCE) vulnerability in the UPFILE_PIC_ZOOM_HIGHT component. An attacker can exploit this flaw to execute arbitrary code on the server.

Risk Assessment

The risk for the organization includes full server compromise, data theft, or further attacks on the infrastructure.

Recommendation

It is recommended to immediately update ESPCMS to the latest version or apply available security patches.

Original NVD description (English source)

ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZOOM_HIGHT.