CVE-2023-36299: Typecho

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general parameters in index.php.

Affected products

• Typecho Typecho: version 1.2.1 only

Published 2023-08-03. Last modified 2026-06-17.