CVE-2021-35284: CMS-PHP Project CMS-PHP

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

SQL Injection vulnerability in function get_user in login_manager.php in rizalafani cms-php v1.

Affected products

• CMS-PHP Project CMS-PHP: version 1.0 only

Published 2022-11-23. Last modified 2026-06-17.