CVE-2023-36097

CriticalCVSS 9.8

Published: 22/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.73%

49th percentile - higher than 49% of all known CVEs

Versions 3.3.2 and 3.3.3 of funadmin are vulnerable to insecure file upload via plugin installation.

An attacker could exploit this vulnerability to upload malicious files, potentially leading to system compromise.

It is recommended to upgrade to the latest version of funadmin and implement strict controls on file uploads.

Original NVD description (English source)

funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.