Okay-cmsCVEs & Vulnerabilities

1 CVEs affecting Okay-cms products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

okaycms 1

CVE-2019-16885CRITICAL

In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie. This could happen at two places: first in view/ProductsView.php using the cookie price_filter, and second in api/Comparison.php via the cookie comparison.

3 Dec 2019

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database