CVE-2022-41497: Clippercms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php.

Affected products

• Clippercms Clippercms: version 1.3.3 only

Published 2022-10-13. Last modified 2026-06-17.