CVE-2022-46102: Ayacms Project Ayacms

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php

Affected products

• Ayacms Project Ayacms: version 3.1.2 only

Published 2022-12-22. Last modified 2026-06-17.