CVE-2022-45966: Classcms Project Classcms

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.

Affected products

• Classcms Project Classcms: version 3.5 only

Published 2022-12-22. Last modified 2026-06-17.