CVE-2021-44302: Baicloud-CMS Project Baicloud-CMS

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.

Affected products

• Baicloud-CMS Project Baicloud-CMS: version 2.5.7 only

Published 2022-02-19. Last modified 2026-06-17.