Vulnerability Details CVE-2024-31022
An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.4%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2024-31022
-
cpe:2.3:a:steve228uk:candycms:1.0.0