CVE-2022-48161: Easy Images Project Easy Images

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Easy Images v2.0 was discovered to contain an arbitrary file download vulnerability via the component /application/down.php. This vulnerability is exploited via a crafted GET request.

Affected products

• Easy Images Project Easy Images: version 2.0 only

Published 2023-02-01. Last modified 2026-06-17.