Exponent CMS vulnerabilities
We track 1 vulnerability in Exponent CMS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 9, 2022.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Exponent CMS vulnerabilities
- 7.2 High severity
Exponent CMS: Unrestricted Upload of File with Dangerous Type
Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload it, the PHP file will be placed at "themes/simpletheme/{rce}.php" from where can be accessed in orde