CVE-2022-46610: 72crm Wukong CRM

High severity, CVSS 8.8. EPSS: 18.1% chance of exploitation in the next 30 days.

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

• 72crm Wukong CRM: version 9.0 only

Published 2023-01-10. Last modified 2026-06-17.