CVE-2022-30007: Gxcms Project Gxcms

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server.

Affected products

• Gxcms Project Gxcms: version 1.5 only

Published 2022-05-17. Last modified 2026-06-17.