CVE-2022-47766

PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability.

• CWE-434
• CWE-434

• https://github.com/PopojiCMS/PopojiCMS/issues/35Exploit, Issue Tracking, Third Party Advisory
• https://github.com/PopojiCMS/PopojiCMS/issues/35Exploit, Issue Tracking, Third Party Advisory

Published

Jan 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47747kraken <= 0.1.4 has an arbitrary file read vulnerability via…7.5
• CVE-2022-4775The GeoDirectory WordPress plugin before 2.2.22 does not val…5.4
• CVE-2022-47757In imo.im 2022.11.1051, a path traversal vulnerability deliv…9.8
• CVE-2022-47758Nanoleaf firmware v7.1.1 and below is missing TLS verificati…9.8
• CVE-2022-4776The CC Child Pages WordPress plugin before 1.43 does not val…5.4
• CVE-2022-47762In gin-vue-admin < 2.5.5, the download module has a Path Tra…7.5
• CVE-2022-47767A backdoor in Solar-Log Gateway products allows remote acces…9.8
• CVE-2022-47768Serenissima Informatica Fast Checkin 1.0 is vulnerable to Di…7.5
• CVE-2022-47769An arbitrary file write vulnerability in Serenissima Informa…9.8
• CVE-2022-4777The Bootstrap Shortcodes WordPress plugin through 3.4.0 does…5.4
• CVE-2022-47770Serenissima Informatica Fast Checkin version v1.0 is vulnera…9.8
• CVE-2022-4778StreamX applications from versions 6.02.01 to 6.04.34 are af…6.5