CVE-2019-17046: Ilch CMS

High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days.

Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.

Affected products

• Ilch Ilch CMS: version 2.1.22 only

Published 2019-09-30. Last modified 2026-06-17.