CVE-2018-13021

7.2 highEPSS 2.2%

High (7.2) in hongcms project hongcms. EPSS 2.2% chance of exploitation in the next 30 days.

An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can result in PHP code execution via the admin/index.php/template/upload URI.

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2018-06-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hongcms_project:hongcms

References

https://github.com/Neeke/HongCMS/issues/5
https://github.com/Neeke/HongCMS/issues/5

Check your stack JSON