CVE-2021-44977: Idreamsoft Icms

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files.

Affected products

• Idreamsoft Icms: up to and including 8.0.0

Published 2022-02-04. Last modified 2026-06-17.