CVE-2022-41544
CVE-2022-41544
Vexday Risk Score
41Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 8.8EPSS 9.4%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
18 Oct 2022Published on NVD
15 May 2023Public PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 4
githubgithub.com/yosef0x01/CVE-2022-41544★ 1githubgithub.com/h3x0v3rl0rd/CVE-2022-41544★ 0cve_referencepacketstormsecurity.com/files/172553/GetSimple-CMS-3.3.16-Shell-Upload.htmlunverifiedexploitdbwww.exploit-db.com/exploits/51475unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →