CVE-2022-47083: Spitfire Project Spitfire

High severity, CVSS 8.8. EPSS: 18.2% chance of exploitation in the next 30 days.

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application.

Affected products

• Spitfire Project Spitfire: version 1.0475 only

Published 2023-01-10. Last modified 2026-06-17.