CVE-2022-27442

7.5 highEPSS 1.0%

High (7.5) in tpcms project tpcms. EPSS 1.0% chance of exploitation in the next 30 days.

TPCMS v3.2 allows attackers to access the ThinkPHP log directory and obtain sensitive information such as the administrator's user name and password.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2022-04-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19