CVE-2022-25104: Horizontcms Project Horizontcms

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/file-manager/.

Affected products

• Horizontcms Project Horizontcms: version 1.0.0 only

Published 2022-02-24. Last modified 2026-06-17.