Medium severity6.3NVD Advisory· Published Apr 26, 2026· Updated Apr 29, 2026

CVE-2026-7043

Description

A vulnerability has been found in GreenCMS up to 2.3. This impacts the function pluginAddLocal of the file /index.php?m=admin&c=custom&a=pluginadd. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/ueh1013/VULN/issues/7nvd
vuldb.com/submit/798529nvd
vuldb.com/vuln/359622nvd
vuldb.com/vuln/359622/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000