CVE-2022-47926: Ayacms Project Ayacms

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php

Affected products

• Ayacms Project Ayacms: version 3.1.2 only

Published 2022-12-22. Last modified 2026-06-17.