CVE Catalog

CVE-2023-37677

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.08%

61th percentile - higher than 61% of all known CVEs

Summary

Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.php.

Risk Assessment

This vulnerability could allow attackers to remotely execute arbitrary code on the server, posing a serious security threat to the system.

Recommendation

It is recommended to update Pligg CMS to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS