Critical severity9.8NVD Advisory· Published Nov 10, 2022· Updated Jun 17, 2026

CVE-2022-43074

Description

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

AyaCMS/AyaCMSdescription
loadream/AyaCMSllm-fuzzy
Range: =3.1.2
AyaCMS/AyaCMSllm-fuzzy
Range: =3.1.2

Patches

Vulnerability mechanics

References

github.com/loadream/AyaCMS/issues/3nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000