CVE-2021-45015
CRITICALtaocms 3.0.2 - Arbitrary File Deletion via file.php
Title source: llmDescription
taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72.
References (1)
Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/taogogo/taocms/issues/12
Scores
CVSS v3
9.1
EPSS
0.0119
EPSS Percentile
64.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Details
CWE
CWE-22
Status
published
Products (1)
taogogo/taocms
3.0.2
Published
Dec 14, 2021
Tracked Since
Feb 18, 2026