CVE-2022-27228: BITRIX24

Critical severity, CVSS 9.8. EPSS: 20.8% chance of exploitation in the next 30 days.

In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code.

Affected products

• BITRIX24 BITRIX24: before 21.0.100 (fixed in 21.0.100)

Published 2022-03-22. Last modified 2026-06-17.