cvedb.io
CVE-2021-44238
HIGH · CVSS 7.2
EPSS exploitation probability: 0%
Published 2022-03-01T15:15:07.820 · Last modified 2026-06-17T04:12:06.567

Summary

AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,

Affected products

ayacms_project — ayacms

Does this affect you?

Add your gear to cvedb and we'll alert you only when ayacms_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.