CVE-2022-38329

4.3 mediumEPSS 0.5%

Medium (4.3) in shopxian shopxian cms. EPSS 0.5% chance of exploitation in the next 30 days.

A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, potentially causing the administrator to perform unintended actions on an affected system. The vulnerability could allow attackers to modify or delete specific content through crafted requests, potentially leading to data loss and system integrity issues.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2022-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

shopxian:shopxian_cms

References

https://albert5888.github.io/posts/CVE-2022-38329/
https://github.com/zhangqiquan/shopxian_cms/issues/4
https://albert5888.github.io/posts/CVE-2022-38329/
https://github.com/zhangqiquan/shopxian_cms/issues/4

Check your stack JSON