← All advisories

High severity8.8NVD Advisory· Published Apr 26, 2022· Updated Jun 17, 2026

CVE-2022-28528

CVE-2022-28528

Description

bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Bloofoxcms/Bloofoxcms3 versions
cpe:2.3:a:bloofox:bloofoxcms:0.5.2.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:bloofox:bloofoxcms:0.5.2.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =0.5.2.1

Patches

Vulnerability mechanics

References

1

github.com/alexlang24/bloofoxCMS/issues/14nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.