Vulnerabilities > B2Evolution > B2Evolution CMS > 7.2.5

DATE CVE VULNERABILITY TITLE RISK
2023-01-03 CVE-2022-44036 Unrestricted Upload of File with Dangerous Type vulnerability in B2Evolution CMS 7.2.5
In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution.
network
low complexity
b2evolution CWE-434
7.2