CVE-2022-28528 - bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit

HIGH

bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit

Published Apr 26, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.26%

bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://github.com/alexlang24/bloofoxCMS/issues/14		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Apr 26, 2022

Updated Aug 3, 2024

Reserved Apr 4, 2022

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a