CVE-2021-46204: Taogogo Taocms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php.

Affected products

• Taogogo Taocms: version 3.0.2 only

Published 2022-01-19. Last modified 2026-06-17.