← All advisories

Critical severity9.8OSV Advisory· Published Mar 7, 2018· Updated Jun 17, 2026

CVE-2016-7443

CVE-2016-7443

Description

Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Exponent/Exponent CMSOSV3 versions
v2.3.0, v2.3.0patch1, v2.3.0patch2, …+ 2 more
- (no CPE)range: v2.3.0, v2.3.0patch1, v2.3.0patch2, …
- cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*range: >=2.3.0,<=2.3.9
- (no CPE)range: 2.3.0 - 2.3.9

Patches

Vulnerability mechanics

References

2

www.exponentcms.org/news/patch-1-released-for-v2-3-9nvdPatchVendor Advisory
github.com/exponentcms/exponent-cms/releases/tag/v2.4.0nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.