CVE-2022-30804

MEDIUM

elitecms 1.01 - Unauthenticated Arbitrary File Deletion via delete_image.php

Title source: llm

elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0105

EPSS Percentile 59.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

CWE

CWE-22

Status published

Products (1)

elitecms/elite_cms 1.01

Published Jun 02, 2022

Tracked Since Feb 18, 2026