CVE-2021-44238: Ayacms Project Ayacms

High severity, CVSS 7.2. EPSS: 1.9% chance of exploitation in the next 30 days.

AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,

Affected products

• Ayacms Project Ayacms: version 3.1.2 only

Published 2022-03-01. Last modified 2026-06-17.