CVE-2018-7251: Anchorcms Anchor

Critical severity, CVSS 9.8. EPSS: 71.8% chance of exploitation in the next 30 days.

An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error (such as "Too many connections") has occurred.

Affected products

• Anchorcms Anchor: version 0.12.3 only

Published 2018-02-19. Last modified 2026-06-17.