CVE-2022-25578: Taogogo Taocms

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.

Affected products

• Taogogo Taocms: version 3.0.2 only

Published 2022-03-18. Last modified 2026-07-09.