CVE-2021-43478: Hoosk

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website.

Affected products

• Hoosk Hoosk: version 1.8.0 only

Published 2022-03-31. Last modified 2026-06-17.