CVE-2022-47003: Murasoftware Mura CMS

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.

Affected products

• Murasoftware Mura CMS: before 10.0.580 (fixed in 10.0.580)

Published 2023-02-01. Last modified 2026-07-09.