CVE-2021-46113: Kea-Hotel-ERP Project Kea-Hotel-ERP

High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days.

In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service.

Affected products

• Kea-Hotel-ERP Project Kea-Hotel-ERP: affected versions not specified

Published 2022-01-25. Last modified 2026-06-17.