CVE-2021-44978: Idreamsoft Icms

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution.

Affected products

• Idreamsoft Icms: up to and including 8.0.0

Published 2022-02-04. Last modified 2026-06-17.