CVE-2021-46360: Ocproducts Composr

High severity, CVSS 8.8. EPSS: 9.2% chance of exploitation in the next 30 days.

Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.

Affected products

• Ocproducts Composr: up to and including 10.0.39

Published 2022-02-09. Last modified 2026-06-17.