CVE-2022-44088

CriticalCVSS 9.8

Published: 10/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

19.95%

97th percentile - higher than 97% of all known CVEs

Summary

ESPCMS P8.21120101 was found to have a remote code execution (RCE) vulnerability in the INPUT_ISDESCRIPTION component. An attacker can exploit this flaw to execute arbitrary code on the server.

Risk Assessment

The risk for the organization includes potential server takeover, data theft, or system disruption by an unauthorized attacker.

Recommendation

It is recommended to immediately update ESPCMS to the latest available version and apply security patches provided by the vendor.

Original NVD description (English source)

ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION.