CVE-2018-16141: Thinkcmf Thinkcmfx

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileController.class.php via an imgurl parameter with a ..\ sequence. A member user can delete any file on a Windows server.

Affected products

• Thinkcmf Thinkcmfx: version x2.2.3 only

Published 2018-08-30. Last modified 2026-06-17.