CVE-2022-44087: Ecisp Espcms

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZOOM_HIGHT.

Affected products

• Ecisp Espcms: version p8.21120101 only

Published 2022-11-10. Last modified 2026-07-09.