Okay-cms

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Okay-cms records in CISA KEV

No Okay-cms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Okaycms · all components

TI-2019-12592 CVE-2019-16885 · GHSA-8gmp-r363-hj9m

MEDIUM 49

In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.046 Published 2019-12-03 No fix listed CWE-94