CVE-2022-23880: Taogogo Taocms

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

• Taogogo Taocms: version 3.0.2 only

Published 2022-03-23. Last modified 2026-06-17.