CVE-2022-37299: Shirne CMS Project Shirne CMS

Medium severity, CVSS 6.5. EPSS: 3.5% chance of exploitation in the next 30 days.

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php

Affected products

• Shirne CMS Project Shirne CMS: version 1.2.0 only

Published 2022-09-09. Last modified 2026-06-17.