CVE-2022-36262

9.8 criticalEPSS 1.9%

Critical (9.8) in taogogo taocms. EPSS 1.9% chance of exploitation in the next 30 days.

An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2022-08-15
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19