CVE-2022-36197: Bigtreecms Bigtree CMS

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PDF file.

Affected products

• Bigtreecms Bigtree CMS: version 4.4.16 only

Published 2022-08-03. Last modified 2026-06-17.