CVE-2022-46135: Aerocms Project Aerocms

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.

Affected products

• Aerocms Project Aerocms: version 0.0.1 only

Published 2022-12-16. Last modified 2026-06-17.