CVE-2022-46020: Wbce CMS

Critical severity, CVSS 9.8. EPSS: 39% chance of exploitation in the next 30 days.

WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

Affected products

• Wbce Wbce CMS: version 1.5.4 only

Published 2022-12-20. Last modified 2026-06-17.