CVE-2022-23316: Taogogo Taocms

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.

Affected products

• Taogogo Taocms: version 3.0.2 only

Published 2022-02-04. Last modified 2026-06-17.